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FOREWORD 


The overall RRS Phase B Study objective is to design a relatively inexpensive satellite to 
access space for extended periods of time, with eventual recovery of experiments on Earth. The 
RRS will be capable of: 1) being launched by a variety of expendable launch vehicles, 2) operating 
in low-earth orbit as a free-flying unmanned laboratory, and 3) executing an independent 
atmospheric reentry and soft landing. The RRS will be designed to be refurbished and reused up 
to three times a year for a period of 10 years. The expected principal use for such a system is 
research on the effects of variable gravity (0-1.5 g) and radiation on small animals, plants, lower 
life forms, tissue samples, and materials processes. 

The Final Report, in conjunction with the Summary Reports referenced herein, provides a 
description of the SAIC design and analysis which investigated various hardware options available 
for fulfilling the NASA RRS requirements using the proposed SAIC concept. Concepts 
considered emphasized off-the-shelf technology, adequate margins of capability, high reliability, 
maintainability, cost effectiveness, and compatibility with existing support networks. From these 
studies, a synergistic preliminary design was developed that can uniquely support a wide range of 
NASA Life Sciences objectives through use of existing technology and space-proven hardware. 
Key vehicle features include: 

• A highly controllable, multi-redundant control/propulsion approach that can ensure 
public safety during CONUS operations. 

• A solar array implementation that can nominally provide an indefinite 100 to 200 watts 
of payload power (over 300 watts in a sun- synchronous orbit), eliminating the mission 
constraints imposed by a stored energy system. 

• A low vehicle shielding level to facilitate exposure to the full space radiation spectrum. 

• A flexible operating configuration to permit variable experimentation within and among 
various missions. 

• A low Coriolis, uniform gravitational environment, for specimens up to at least Group 3 
nonhuman primates (squirrel monkeys and similar species). 

• A launch vehicle adaptor approach that permits low risk use of space-proven Delta 
hardware and technology for either single or dual launches. 

The SAIC RRS design effort was led by the Space System Integration and Development 
Division of SAIC s Space and Defense Group, Torrance, California. The project consisted of a 
series of contract-identified trade studies led by Mr. Bob Curtis, followed by a preliminary design 
effort led by Mr. Howard Hayden. The satellite design was developed under a team approach in 
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which SAIC personnel experienced in satellite development and subsystem technologies led both 
the overall design effort and the individual design tasks, with specialized contractor/vendor support 
used as needed for specific hardware applications {Figure i). The overall effort involved numerous 
SAIC personnel (Table i) from various SAIC divisions who had specific experience applicable to 
the project. The Fairchild Space support (manufacturing, reliability and cost areas, as well as other 
valuable observations), was led by Mr. Marty Nachman of the Torrance, California, office. 
Mr. Michael Richardson of the NASA/JSC New Initiatives Office provided the RRS objectives 
and policy guidance for the NAS 9-18202 contract. 


PROGRAM MANAGEMENT AND SYSTEM INTEGRATION - SAIC/TORRANCE 
MANUFACTURING, RELIABILITY - FAIRCHILD/TORRANCE/GERMANTOWN 




PARACHUTE - EAGLE, COR Aerospace 
PROPULSION - SAIC/Torrance 


GUIDANCE, NAVIGATION, AND CONTROL ■ 
- SAIC/Torrance Texas Instruments 

ITHACO Ball 


Honeywell 

TT&C — 

- SAIC/Torrance/Houston 

Motorola Ayden Vector 

POWER - SAIC/Torrance 

Hughes 




mm r 


STRUCTURE - SAIC/Torrance/Irvine 
Astro Aerospace 

PAYLOAD - SAIC/Torrance 

Allied Signal 
Krug International 
Microcraft 

THERMAL - SAIC/Torrance 

REENTRY - SAIC/Ft Washington, PA 
COR Aerospace 

LAUNCH VEHICLE INTEGRATION 
- SAIC/Torrance McDonnell Douglas 

SAFETY - SAIC/Houston/Torrance 

COST - SAIC/Torrance 

Fairchild/Co$t, Inc. 





Figure i. SAIC Phase B Design Team 
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Table i. SAIC Design Team 


Manager, Preliminary Design - Howard Hayden 
Manager, Trade Studies - Bob Curtis 

System Engineer - Howard Hayden 

Lead Vehicle Engineer - Steve Apfel 

Lead Payload Engineer - Scott Heppner 

Life Sciences Advisors - Bill Haynes, Carl Reichwein 

System Engineering - Hayden, Norton Rodman, Apfel, Ed Schwarzbein 
Payload - Heppner, Hayden, Apfel, Haynes, Larry Anderson, Craig Fox 
Safety - Tom Janicik, Apfel, Dan Martens 
Structures - Apfel, Bill Loomis 

Electrical Power - Rodman, Mark Matossian, Apfel, Hayden 

Propulsion - Apfel, Chris Scheil 

GNC - Hayden, Scott Bell 

TT&C - Tom Stewart, Hayden, Fox 

Thermal - Clark Wallace 

Reentry - Sid Weinberg, Wallace, Curtis 

Recovery - Apfel, Curtis 

Cost Estimation - Mike Niggel, Hayden 

And the Torrance publications personnel who, under the guidance of 
Barbara Barrett, turned a mass of paper into a quality product 
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1.0 INTRODUCTION 


1.1 Background 

The Reusable Reentry Satellite (RRS) is intended to provide investigators in several 
biological disciplines with a relatively inexpensive method to access space for up to 60 days with 
eventual recovery on Earth. The RRS will permit totally intact, relatively soft, recovery of the 
vehicle, system refurbishment, and reflight with new and varied payloads. The RRS is to be 
capable of three reflights per year over a 10-year program lifetime. The RRS vehicle will have a 
large and readily accessible volume near the vehicle center of gravity for the Payload Module 
(PM) containing the experiment hardware. The vehicle is configured to permit the experimenter 
late access to the PM prior to launch and rapid access following recovery. 

The RRS will operate in one of two modes: 

a. Asa free-flying spacecraft in orbit, and will be allowed to drift in attitude to provide 
an acceleration environment of less than 10'^ g. The acceleration environment during 
orbital trim maneuvers will be less than 10' 3 g. 

b. As an artificial gravity system, which spins at controlled rates to provide an artificial 
gravity of up to 1.5 Earth g. 

The RRS system will be designed to be rugged, easily maintained, and economically 
refurbishable for the next flight. Some systems may be designed to be replaced rather than 
refurbished, if cost effective and capable of meeting the specified turnaround time. The minimum 
time between recovery and reflight will be approximately 60 days. 

The PMs will be designed to be relatively autonomous, with experiments that require few 
commands and limited telemetry. Mass data storage will be accommodated in the PM. The 
hardware development and implementation phase is currently expected to start in 1991 with a 
first launch in late 1993. 

1.2 Purpose 

The National Aeronautics and Space Administration (NASA) contracted with SAIC to 
perform a Phase B study to provide a preliminary design of the RRS concept. Numerous trade 
and design studies were performed to refine the SAIC RRS concept into a design that satisfies 
the NASA requirements and is viable. The purpose of this Final Report is to summarize the 
overall effort with emphasis on the functional and preliminary design description of the vehicle 
and each subsystem. 
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2.0 REQUIREMENTS 


The overall objectives and requirements for the RRS Phase B effort (Table 2-1) are m the 
November 23, 1988, RRS System Design Study Statement of Work. The primary objective was 
to attain a viable preliminary design for the RRS and associated Ground Control Experiment 
Module, including both system and payload interface requirements. Other objectives specifically 
included analyses of operations, refurbishment, system interface, development planning, and cost 
considerations. The intent was to optimize the basic Phase A design through a series of 
configuration/scaling, recovery, refurbishment, electrical power, TT&C, Thermal, and payload 
interface trade studies and develop a reference design for use in defining the Phase C/D effort. 


Table 2-1. RRS Program 


OBJECTIVE 

PROVIDE LIFE SCIENCES INVESTIGATORS A RELATIVELY INEXPENSIVE, FREQUENT 

ACCESS to space for extended periods of time with eventual satellite 

RECOVERY ON EARTH 
GENERAL REQUIREMENTS 
THE RRS WILL: 

- Provide On-Orbit Laboratory for Research on Biological and Materials Processes 

- Be Launched on a Number of Expendable Launch V ehicles 

- Operate in Low-Earth Orbit as a Free-Hying Unmanned Laboratory 

- Provide Semi-Autonomous Atmospheric Reentry and Soft Landing in Continental U.S. 

SPECIFIC REQUIREMENTS 

MAXIMUM ORBITAL STAY OF 60 DAYS 
3 REFLIGHTS PER YEAR OVER 10- YEAR PROGRAM LIFE 

ATTITUDE CONTROL 

- 3-Axis Stabilized 

- Artificial Gravity (up to 1.5 g) 

- Free Hyer 

RUGGED AND EASILY MAINTAINABLE 

- Off-the-Shelf Components 
MODULAR DESIGN 

- Satellite Bus 

- Nominal Satellite Functions (Thermal, Power, etc.) 

- Payload Module 

- Rodent Module 

- General Biology Module 

- ESA Microgravity Botany Facility 

- Materials Processing Experiments 
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2.1 Formal Requirements Documentation 

The requirements for the system (vehicle and Rodent Module) are contained in Reference A 
which in turn contained a list (Table 2-2) of 13 applicable documents primarily concerning payload 
requirements. The key payload documents included the National Institutes of Health (NIH) guide 
for laboratory animals (Table 2-2, Item h) and the following LifeSat Science Working Group 
facility requirements (References B, C, D) and Hq NASA LifeSat Level I, Phase B science and 
technical requirements (Reference E) documentation. 

Table 2-2. RRS SRD Applicable Documents 

(a) NASA Technical Memorandum TM-82473, "Terrestrial Environment (Climatic) Criteria Guidelines 
for Use in Aerospace Vehicle Development, 1982 Revision." 

(b) NASA Technical Memorandum TM-781 19, "Space and Planetary Environment Criteria Guidelines 
for Use in Space Vehicle Development, 1982 Revision." 

(c) General Biology Module Specification. 

(d) ESA Botany Module Specification. TBS 

(e) NASA Basic Safety Manual, NGB 1700.1 (Vl-A). 

(0 NASA Technical Memorandum TM-101043 "A Conceptual Design Study of the Reusable Reentry 
Satellite," October 1988, NASA Ames Research Center. 

(g) "LifeSat - An International Biological Satellite Program, Science, Uniqueness, Necessity," May 
1988, NASA Ames Research Center. 

(h) Guide for Care and Use of Laboratory Animals, U.S. Department of Health and Human Services, 

Public Health Service, National Institutes of Health, NIH Publication No. 85-23, Revised 1985. 

(i) Animal Welfare Act of 1966 as amended, 7 U.S.C. 2131 et seq. 

(j) Environmental and Special Senses, In: Methods of Animal Experimentation, Vol. IV, W. I. Gay, 
ed., Academic Press, 1973. 

(k) Housing to Control Research Variables, In: The Laboratory Rat, Vol. I, H. J. Baker et al., eds.. 
Academic Press, 1973. 

(l) Federation of American Societies for Experimental Biology (FASEB) Biological Handbooks. 

(m) Nutrient Requirements of Laboratory Animals, 3rd ed.. Number 10, National Academy of Sciences, 

1978. 


References: 

A. Reusable Reentry Satellite (RRS) System Requirements Document (SRD), Novem- 
ber 23, 1988. 

B. Rodent Module, Facility Science Requirements Document, September 9, 1988. 

C. Plant Payload, Facility Science Requirements Document, September 8, 1988. 

D. General Biology Payload, Facility Science Requirements Document, September 9, 
1988. 

E. LifeSat Reusable Reentry Satellite (RRS), Level I Phase B, Science and Technical 
Requirements Document (STRD), December 2, 1988. 
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2 . 2 System Requirements 


The system requirements for the RRS are documented in a set of specifications (Figure 2-1) 
which began as a total implementation of the requirements contained in the RRS SRD. These basic 
requirements were then modified to reflect the more detailed design requirements as the preliminary 
design evolved. The multiple specification approach was taken since the RRV and PM are 
intended to be developed by independent organizations based on a firm interface specification 
which is to be the same for all versions of the payload module. The specification organization also 
reflects the requirement that all RRS external support (ELV and ground command and control) will 
be with the RRV (Figure 2-2). The organization of the PM and RRV specifications are by 
subsystem (Table 2-3) to simplify the requirements allocation and the audit trail through the 

modular design. 


RRS SYSTEM SPEC 

\ 



RRS-SS-100 

\ 

s 

KGCEM Addendum' A////, 

s 


RRS SYSTEM 



PHASE B DELIVERABLE 


Figure 2-1. RRS Specification Tree 
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Figure 2-2. RRS Functional Flow 
Table 2-3. RRS Subsystem Distribution 
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The specifications delivered as part of the Phase B effort are: 


• RRS-SS-100 

• RRS-RM-200 

• RRS-RRV-200 

• RRS-IFS-101 


RRS System Specification 

Payload Module Segment Rodent Module Specification 
Reusable Reentry Vehicle Segment Specification 
RRV/PM Interface Specification 


The EM/SM, MM/DM, RRV/ELV, and RRV/MS (NATDN) interfaces, which do not have 
Phase B IFS documentation requirements, are described in Section 6 of this report 


2.3 Design Implications 

Several primary requirements, specific and inferred, have either driven or constrained the 
configuration and internal design of the RRS. Several other issues, not explicitly addressed in the 
requirements documentation, are equally critical in achieving the desired system performance as 
described by NASA during the Phase B effort More specifically: 

a. Design Drivers 

1 . Animal Welfare (SRD Paragraph 4.3.2.2). The 99% probability of successful 
healthy recovery of experimental animals, combined with the long periods of no 
contact (SOW Para 3.2.6), drives a fail operational architecture for any failure 
critical to the health or successful recovery of the animals (Appendix D). 

2. Public Safety (SRD Paragraph 3.1.7, 3.2.1 and 3.2.10). Public safety, although 
not explicitly defined in the SRD, involves two equally critical considerations: 

(a) CONUS Recovery. Neither the 3-sigma footprint requirement of Paragraph 
3.1.7, nor the 0.99% animal welfare requirement, will result in performance 
that fulfills the typical 1 in 1,000,000 launch base safety requirement. The 
need to preclude any single-point failure which would result in an impact 
significantly outside the CONUS 12x60 km landing footprint, thereby creating 
a major public hazard, drives the use of an autonomous, no single-point, multi- 
failure tolerant recovery process. A companion consideration is the impact the 
only other real alternative, a water recovery, has on PM access and 
refurbishment, and the associated program costs. 
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(b) Uncontrolled Reentry. Although there is a small probability of death, injury 

and/or significant damage from an uncontrolled reentry, the reentry of any 
space debris of any significant size is a public safety concern. The RRS 
program can create such debris from either of two causes, total failure of the 

vehicle on orbit or any portion of the vehicle deliberately left behind. More 
specifically: 

(1) Basic Vehicle. The nature of the RRV is that a dead vehicle will sooner or 
later reenter intact with a massive kinetic energy release at impact. The 
need to preclude this failure mode drives the use of vehicle redundancy 
and automatic load shed capability to ensure the option for a manual 
initiated, wide ocean area impact is virtually guaranteed. 

( 2 ) Jettisoned Debris (SOW Paragraph 3.1.2.3b). Although the probability 

of intact reentry and the size of any jettisoned structure would likely be 
smaller than the basic vehicle, the full assurance of public safety requires, 
in descending order of design impact and magnitude of testing, either a 
controlled wide ocean area reentry, a guaranteed bum-up during reentry, 
or no jettisoning. Furthermore, since the system intent is multiple, short 
duration missions, a design that leaves significant debris in orbit has the 
potential for creating significant on-orbit operational safety restrictions 
unless all missions are flown in significantly different orbits. 

3. Total Power (SRD Paragraph 3.3.2.4d). Although the cunen, power per rodent- 
day is approximately the same as the original 45 kilowatt-hour (kWh) for a 
12-rodent, 24-day mission, the nearly factor of 4 increase in total payload power 
required to support the 18-rodent, 60-day mission is a major design driver. 

b. Design Constraints 

1. Payload Compatibility (Reference A, Paragraphs 2.0, 3.1.3, and 4.0). The 
18-rodent, 60-day requirement, in conjunction with the NIH laboratory animal 
guide (Table 2 - 2), and the requirement to be compatible with a 35-inch diameter 
tamcal payload essentially sets the minimum weight, power and dimensions 
requirements for PM support. The 1080 rodent-day requirement, a factor of 3.75 
greater than the 12x24 Phase A concept originally identified in the SOW as the 
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minimum requirement, is understood to be driven by the statistical sampling level 
required to ensure valid experimental results. 

2. Payload Access (SRD Paragraphs 3.2.2.3 and 3.2.5. 1). The 4-hour prelaunch and 
2-hour post-landing access requirements, while not a major constraint on the 
vehicle, are significant in the operations process. 

3 . Flight Experiment Control (SRD Paragraph 4.9.1). The ground control experiment 
performs the dual function of ground control and the calibration of the existing 
extensive ground test database with space experimentation. In the case of 
calibration, the space experiment needs to replicate the ground test gravity 
environment as precisely and uniformly as possible so that any gravity-driven 
differences in ground and microgravity results can be correctly assessed. 

Additional Requirements 

1 . Dual Launch. The dual launches included in the current RMOAD planning, but not 
the basic SOW/SRD, are clearly a major requirement and should be specified if the 
overall life cycle cost is to be minimized. 

2 . Radiation Experimentation. The need for galactic radiation experimentation for long 
duration manned missions requires an orbit that will maximize the galactic to near- 
earth proton/electron radiation ratio. This ratio should be specified so that the 
combined effects of apogee time, orbit precession and vehicle shielding on the 
radiation exposure, and the vehicle propulsion, can be optimized for a minimum 
energy orbit (not totally beyond the earth’s radiation belts) with acceptable 
(maximum G, thermal) reentry opportunities. 



3.0 EVENT SYNOPSIS 


This effort was initiated by award of contract NAS 9-18202, a Firm-Fixed-Price Level-of- 
Effort for the Reusable Reentry Satellite, to SAIC on July 12, 1989. The contract award was 
based upon the SAIC proposal submitted in response to the January 10, 1989 NASA/JSC 
competitive RFP 9-BE2-23-8-48P. The Statement of Work structured the system design study 
into two 6-month efforts. Part I for system, subsystem, interface, and operational trade studies and 
Part II for completion of the reference design and associated specification/planning/cost data. 


Part I was initiated with a kickoff proposal overview briefing to the NASA LifeSat Science 
Working Group (LSWG) held in lieu of the DRL-01 kickoff meeting and included the briefings 
and deliveries in Table 3-1. 


Table 3-1. Part I Synopsis 

Meetings: 

12 Jul 89 LSWG System Design Study Briefing 

24 Oct 89 LSWG Interim Status Review 

28 Nov 89 Interim Status Review 

08 Feb 90 Midterm Review 

1 5 Feb 90 LSWG Midterm Update 

Deliveries: 

Summary Reports 

Launch Tradeoff 
Reentry Dispersion Analysis 
Recovery Tradeoff Study 
Propulsion System Trade Study 
Power System Trade Study 
Thermal Control Trade Study 
Payload Module 
Configuration Trade Study 
Telemetry, Tracking and Command Tradeoff Study 
Preliminary Life Cycle Cost Estimate 
Preliminary Hazard Analysis 
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Part II was initiated following the receipt of the NASA/JSC post-Part I requirements update 
and included the briefings and deliveries in Table 3-2. 


Table 3-2. Part II Synopsis 


Meetings: 

06 Jun 90 Non- Advocate Review Concept Overview 
02 Nov 90 Final Review 


Deliveries: 

Final Report 

Appendices: RRV Manufacturing Plan 

Rodent Module Manufacturing Plan 
Payload Hazard Analysis 
Preliminary Reliability Assessment 

Specifications 

RRS-SS- 100 System Specification for the Reusable Reentry Satellite 

RRS-VS-200 Segment Specification for the Vehicle Segment of the 
Reusable Reentry Satellite 

RRS-PS-200 Segment Specification for the Payload Segment of the 

Reusable Reentry Satellite 

System Cost Estimates Document 
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4.0 STUDY RESULTS 


This NASA Phase B study effort was initiated to provide further definition of the RRS 
concept and to develop a preliminary design. The effort included numerous tradeoff studies with 
appropriate depth of analysis to clarify and document the viability of each approach. The system 
needed to be rugged, easily maintained, and economically refurbishable for the next flight. Some 
subsystems were designed to be replaced, rather than refurbished, if system replacement is cost 
effective and able to meet specified turnaround time. The hardware development and implementa- 
tion schedule used in the trade studies is based on a program start in 1991 with a first launch m late 
1993. The system and operations were developed to the degree necessary to provide a complete 
description of the designs and functional specifications. 

4.1 Approach 

Although the series of trade studies performed were done primarily during Part I, an 
extended effort was required in Part H as part of the overall preliminary design effort. The study 
results are documented in a series of trade study Summary Reports and/or the Final Report, 
depending upon the level of detail. In general, the individual Summary Reports emphasize design 
options while the Final Report is primarily oriented toward the preliminary design. 

The Summary Report analyses were performed in accordance with the direction contained 
in the RRS Statement of Work and the System Requirements Document (SRD) and responses to 
those requirements are listed in each report. Although the individual analyses and studies did not 
necessarily lend themselves to be documented in exacdy the same manner, the following general 

outline was used for all reports: 


• Purpose 

• Groundrules and Assumptions 

• Analysis Methodology 

• Analysis Results 

• Conclusions 

• Recommendations 
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The following individual summary reports have been published: 


RRS -02 1 Launch Tradeoff Study 

March 1990 

RRS -022 Recovery Tradeoff Study 

March 1990 

RRS-023 Reentry Dispersion Analysis 

March 1990 


RRS-024 
April 1990 

RRS-025 
February 1991 

RRS-026 
April 1990 

RRS-027 
April 1990 

RRS-028 
May 1990 


Payload Module 

Telemetry, Tracking & Command (TT&C) Coverage Tradeoff Study 
Propulsion System Trade Study 
Thermal Control Trade Study 
Power System Trade Study 


RRS -042 Configuration Trade Study 

December 1990 


4.2 Trade Studies Summary 

With few exceptions, trade studies did not significantly alter the proposed SA1C design 
concept. The most significant changes are retention of the propulsion system for reentry and 
reversal of the direction of the main thruster firing. Both changes were made to reduce program 
risk Of the trade studies summarized below, those summarized in paragraph 4.2.1 were done 
specifically in response to Paragraph 3.1.2 of the SOW. Those summarized in paragraph 4.2.2 are 
additional studies done in support of the S AJC Part II design effort. 

4.2.1 SOW Directed Trade Studies 

The following tradeoff studies were directed as part of the Part I effort by Paragraph 3. 1 .2 
of the SOW. Although most of the information in the Summary Reports is still valid, some 
refinements occurred during the Part n design effort These refinements are discussed m tins Final 
Report, and are included in the following summaries. 
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4.2. 1.1 Configuration (Section 6.0, 6.4; SOW Paragraph 3.1.2.1). The 
Configuration Trade Study, documented in RRS-042 and updated in this report, addressed the 
shape and internal configuration of the basic vehicle, and scaled the configuration for a range of 
payload capabilities. The final conclusion was that, while the vehicle could be scaled for a range of 
launch vehicles, the suggested preliminary design, which can be launched single or dual on either 
the Delta or Atlas, is the most cost effective from a life sciences viewpoint. The smaller versions 
of the RRV do not have the payload capacity to accommodate the RM requirements or the EBF. 
Furthermore, the limited volume would severely limit off-the-shelf equipment and/or the 
redundancy needed to ensure public safety. The 15 g maximum reentry load did not significantly 
influence vehicle design. 

4.2.1.2 Launch (Section 5.0; SOW Paragraph 3.1.2.2). The Launch Vehicle Trade 
Study, documented in RRS-021 and updated in this report, was initially based on the assumption 
that there is a wide range of potential launch vehicles that would allow cost optimization. In fact, 
the potentially less expensive launches are not less expensive, on a scientific payoff basis, unless 
the experiments in the potential payload are sufficiently different that flying them together causes a 
costly integration task. For example, if 1 8 experiments (rodents) must be flown to get the required 
data, and flying them together in a single launch is not a major integration problem, flying them in 
smaller sets (e.g., 3 launches of 6 each) on some of the proposed boosters is the more costly 
program approach, assuming current requirements (e.g., detailed documentation. S-level parts, 
etc.) must be complied with. Conversely, if the lesser requirements are acceptable, and the 
requirements on the existing boosters comparably decreased, the current booster cost could 
probably be substantially reduced. 

4.2.1.3 Recovery (Sections 6.4, 6.10; SOW Paragraph 3.1.2.3). The recovery 
trades involved several of the above trade studies (Configuration (RRS-042), Recovery (RRS-022) 
and Dispersion (RRS-023) and were expanded to include considerations for a water landing during 
Part II. Although variants on the basic reentry body were considered, significant variation from 
the basic sphere/cone was rejected because the basic shape performed acceptably and any 
significant variation would involve high development cost. The pre-deorbit jettison of any portion 
of the vehicle was rejected to preclude space debris being an issue for any significant use of the 
vehicle and the design impact of ensuring debris would not cause a public hazard on reentry. 
Similarly, the original intent to drop the propulsion subsystem was eliminated for the lack of a safe 
up-range impact zone on all potential orbits. Although the vehicle can be sealed adequately for 
water recovery, and a preliminary water recovery design was established (Section 6.3), the 
recovery force cost is not justified if a safe CONUS landing is possible. Although a crushable 
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nose was the design selected for landing shock attenuation, the water landing system uses a nose 
deployable flotation system that could also be considered for shock attenuation. Similarly, while 
the conventional parachute meets performance requirements and is, therefore, less expensive, the 
vehicle is designed to provide automated control, to a gliding parachute design, to allow use of 
such a parachute whenever the device becomes fully qualified. Meeting the 2 hour post-recovery 
access time did not pose any significant safety issues. 

4.2. 1.4 Refurbishment (Appendix A; SOW Paragraph 3.1.2.4). Since refurbishment 
is in essence a selective re-manufacturing process, the refurbishment trades were done in 
conjunction with the manufacturing analyses and published as part of the Manufacturing Plan 
(Appendix B). Both the initial manufacturing and the refurbishment schedules benefited from the 
parallel integration/test process inherent in the SAIC modularized (Figure 4-1) design philosophy. 


OBJECTIVE: PARALLEL PROCESSING OPERATIONS TO SAVE SCHEDULE AND COST 


DEPLOYED MODULE 


Propulsion Subassembly 



Control Subassembly 



Solar Array 





AFT Solar Array Replaced 
- One Tune Use 

Propulsion, Astromast, Antenna and 
Recovery (Parachute) Components 
Need Extensive Inspection/Cleaning. 
Replace With New Subassembly and 
Place Refurbished Item Into Spares. 

Electronic/ElectricaVThermal 


PAYLOAD MODULE 

Experiment Module - 
Support Module — 



MAIN MODULE 
Internal Assembly 
Heat Shield — 



Components Inspected^ ested 
and Replaced as Needed. 

Ful GNC Configuration Until 
Mission Defined. 

Al Structure Inspected for Damage/Fatigue. 


Refurbishment Is Payload Dependent. 
Rodent Version Would Require Extensive 
InspectiorvCIeaning. ECLSS Reusable. 
Individual Cages Replaced. 

Electronic/Electrical/Thermal Components 
Inspected/Tested and Replaced as Needed. 
Thermal Motors/ Flu id Replaced. 

Replace Heat Shield and Crushabie 
Nosecone. 


TOR 421/02 


Figure 4.1. Modular Manufacturing and Refurbishment Concept 
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4.2.1.5 Electrical Power (Section 6.8; SOW Paragraph 3.1.2.5). Since the severe 
power limitations of a stored energy system (batteries or fuel cells) became evident early in the 
Power Trade Studies (RRS-028), the study primarily involved the estimation of the solar array 
power available for S AIC's rotating vehicle concept. The actual power system trades were done in 
Part II, and are included in this report. A jettisoned power subsystem is not required, and is not 
recommended because of the associated space debris and safety issues. 

4.2.1.6 Telemetry, Command and Tracking (Section 6.7; SOW Paragraph 
3.1.2.6). The TT&C Coverage Trade Study (RRS-025) defined the available ground station 
communications, and the projected twice-a-day contact is adequate for normal, unattended 
operations. However, since off-the-shelf components are available that can service both ground 
and TDRSS links, use of a low-data-rate TDRSS for visibility into critical operations (e.g., de- 
orbit bum) and "sick bird" contingency support is recommended. 

4.2.1.7 Thermal Control (Section 6.9; SOW Paragraph 3.I.2.7). The Thermal 
Trade Study (RRS-027) primarily addresses the payload heat rejection issue. The use of a heat 
shield radiator and the S AIC common g ("inverted") launch configuration allows the vehicle to be 
adequately cooled during pre-launch simply by providing pad cooling air to the Launch Vehicle 
Adapter (LVA). A preliminary thermal analysis was done for all operating modes. A "thermal 
reservoir" concept is used to ensure payload thermal control for critical periods such as post- 
landing to external thermal support connection. 

4.2.1.8 Payload Module Interface (Section 6.2; SOW Paragraph 3.1.2.8). The 
Payload Module (RM) Trade Study (RRS-024) primarily addresses the RM configuration, and 
provides additional detail concerning the internal configuration. The centralized payload core 
design provides the capability to fly up to six mid-deck lockers, in a near-uniform gravitational 
environment, without locker modification (Figure 4-2), and provides free-space radiation exposure 
(Figure 4-3) for a significant portion of the experimental volume. Shock/vibration/thermal isolation 
and electrical/thermal/command/data interfaces were developed and defined in the RRV/RM 
interface specification (RRS-IFS-101). 
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EXPANSION 

VOLUME 



EXTENDED PAYLOAD 
CONFIGURATION 



Figure 4-2. Variable Mid-Deck Locker Capacity 



• EXPERIMENTER CONTROLS EXP03ED PAYLOAD SHIELDING 
Individual experiment voluma shielding can vary 


Figure 4-3. Free Space Radiation Exposure 
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4.2.2 Preliminary Design Support 


The following trade studies were not required by the SOW. but were considered a 
necessary part of the evolution of the SAIC concept. Of these, only the propulsion subsystem 
results were published as a separate summary report. The other results are an integral part of this 

report. 

4.2.2.1 Risk (Section 6.1). The overall mission profile (Figure 4-4) was analyzed to 
determine what mission risks required specific attention during the Part II preliminary design 
phase. This included Preliminary Payload Hazard Analyses (PHA) and Failure Modes and Effects 
Criticality Assessments (FMECA) (Appendix C), as weU as the detailed propulsion/GNC analyses 
needed for the public safety assessment 

*. 12.1 Propulsion (Section 6.5). This trade study (RRS-026) was driven by the need lo 
ensure a fail operational de-orbit process for public safety. The approach also provides the means 
to have multi-orbit vehicle missions. 

4.2.2.3 Structure (Section 6.3). The deployable tri-mast structure was analyzed by Astro 
Aerospace, manufacturer of the proposed Astromast, SAIC structures designers, and an 
independent structural consultant to ensure viability of the tri-mast concept. These results indicate 
sufficient design margin for safe operation out to 100 feet, and the dual retraction concept 
eliminates concern for a single-point retraction failure. The tri-mast assembly is almost fully 
deployment redundant and retraction tridundant These studies are discussed in Section 6.3. 

4.2.2.4 GNC (Section 6.6). The GNC design was investigated in detail (Figure 6.1-3) to 
ensure a fail operational capability for critical operations. Special attention was paid to the 
processor architecture and software development issues to ensure a highly reliable operation and 
minimize software development risk. These studies are discussed in Section 6.6. 
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IMPROPER INSERTION 
Minor Correction Available 
By RRS GNC/Propulslon 


FAILURE TO RELEASE RRS 
Perform Degraded Mlsaion and DeortoU 
Safety Into Wide Ocean Area Using 
RRS GNC/Propulsion 


FAILURE TO EXTEND 
Perform Degraded 
Mission 



s ANOMALOUS DEORBIT BURN 
s Automatic (Manual Override) 

Trim Bum 


FAILURE TO RETRACT 
Totally Redundant (End and Type) 
Retraction Mechanism. Both 
Flight Proven 


GPS Data on 
Allows I 


Recovery Beacon 
Impact Location 


60 DAY LONGERON MICROMETEOROID SURVIVABILITY >0.99999 

CRITICAL SUBSYSTEM BACKUPS 

POWER: Redundant Including Cell String. Battery Isolation 
PROPULSION: Multiple Redundancy With Automatic Trim Bum. 

■ i. iit-u DoAMlIanl Tank* U/WMVTV 


booster failure 

Deetruct Signal Activation of 
Chute May Parrott RRS Recovery 


Multiple, I scalable Propellant Tanks. Monopro- 
peHant Reliability, Precision 

GNC: Multiple, Redundant Microprocessor 
Architecture. Redundant, Multiple 
Phenomenology Measurements ot Critical 
Parameters. PROM tor SEU Immunity in Safety 
Critical Functions 


RECOVERY BEACON 
GPS Data Provides Immediate 
Relates Location Within Msters 


PARACHUTE FAILURE 
Parachute Operation Not 
Required for Public Safety 


TESTING 

HARDWARE: Fully Automated tor Throroughnes* and Metric Trending 
SOFTWARE: Full Stale Checkout With High Fidelity IVAV Prior to Flight 

NO NEW TECHNOLOGY REQUIRED -PROVEN HARDWARE TOR42F/06 
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Figure 4-4. RRS Mission Risk Overview 


5.0 OPERATIONS CONCEPTS 


The concept of operations must clearly define the key operational considerations if they are 
to influence the system design sufficiently to ensure fulfillment of the overall mission objectives. 
In the case of the RRS (Table 5-1), there are three key considerations to be addressed if the 
program is to provide NASA with an efficient, recoverable access to space for unmanned 
experimentation. 


Table 5-1. Key Operations Considerations 


PUBLIC SAFETY 

- Unattended, "Fail Operational" CONUS Reentry Process 

RELIABLE, SCIENCE FRIENDLY ENVIRONMENT 

- Minimum Integrate-to-Launch Timeline 

- Late Pre-Launch Access 

- Efficient On-Orbit Anomaly Identification/Resolution 

- Rapid Post-Recovery Access 

MINIMUM OPERATIONS AND MAINTENANCE (O&M) SUPPORT 

- Independent RRS Ephemeris Determination 

- Minimum Non-Payload Ground Crew Support 
- Pre-launch, On-Orbit, Recovery 


The first consideration - safety - is primarily a design issue (which is discussed 
extensively in other sections of this report) since the actual operations can influence safety only to 
the extent that the design provides for a capability for influence. Although the overall safety of the 
RRS, the flight experiments, ground personnel, the public, and the prevention of property damage 
and damage to ground and flight hardware are all important, the issue of public safety is the 
overriding consideration. This issue, an integral part of the commercial licensing issues being 
addressed by the Department of Transportation (DOT) Office of Commercial Space Transportation 
(OCST), was a Congressional consideration in the 1988 amendments to the Commercial Space 
Launch Act of 1984. The DOT/OCST discussions, primarily driven by the NASA-funded 
Commercial Transporter (COMET) program, could make RRS safety a significant issue outside of 
the NASA process. This could be especially significant if there is any intent to ultimately convert 
the RRS to a commercial operation. If not addressed from the beginning, the potential for 
mandatory redesign to meet evolving requirements represent a, if not the, major cost/schedule risk 
for the RRS program. 
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The remaining considerations are best discussed within the overall context of the RRS 
operations as defined in the RRS System Requirements Document (Table 5-2). These definitions 
have been refined into somewhat greater detail (Table 5-3) to facilitate the Phase B preliminary 
design effort. The discussion will be in three parts: Pre-operations, Mission Operations, and 
Refurbishment. 


Table 5-2. RRS System Requirements Document Mission Operations Definitions 


An RRS mission consists of all activities (payload selection, integration, orbital operations, recovery, data 
retrieval), including ground control experiments, which relate to a single launch. Specific mission operauons 
are defined as follows: 

Event 

Operation 

MISSION INITIATION 

prp.-T Clinch Phase: Consists of payload selection, mission planning, 
experiment verification, and biocompatibility testing, integration, and 
launch site activities. 

LIFTOFF 

I Clinch Phase: Liftoff (first motion) to RRS separation 

ORBIT INSERTION 

Orbital Flight; Begins upon insertion (RRS separation) and concludes with 
First de-orbit command. 


Recovery Phase: Composed of De-orbit, Reentry and Terminal Phases 

DE-ORBIT COMMAND 
for 

De-orbit Phase: First de-orbit command to aerodynamically reoriented 
reentry. 

ALIGNED FOR 
REENTRY 

Reentry Phase: End of de-orbit to pilot chute deployment 

PILOT CHUTE 
DEPLOYMENT 

Terminal Phase: From pilot chute deployment to impact. 

IMPACT 

Prvst-Recoverv Phase: Impact to experiment and data delivered to PI, and 

simultaneous ground control experiments completed. 

MISSION COMPLETE 

Refurbishment The disassembly, inspection, cleaning and repair necessary 
to return the RRV and PM hardware to flightworthy condition. 

GROUND TESTS 

Gmimri f nntml FxperimenL Tests which (1) verify the experiment design, 
(2) verify the hardware biocompatibility and performance, and (3) serve as 
controls for the flight experiments. 
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Table 5-3. Expanded RRS Mission Operations Definitions 


Event 

Operation 

MISSION INITIATION 

Pre-Launch Phase: Composed of Pre-Operations and Launch Base Phases. 

Pre-Operations Phase: Payload selection, mission planning, experiment 
verification, and biocompatibility testing. 

Launch Base Phase: RRV/PM integration and launch site activities. 

LIFTOFF 

launch Phase: Liftoff to RRS separation 

ORBIT INSERTION 

Orbital Flieht: Beams upon RRS separation and concludes with first 
de-orbit command. 

- Pre-Mission Checkout 

- Mission Operations 

- Pre-Reentry Preparations 

Phase: Composed of De-orbit, Reentry and Terminal Phases 

DE-ORBIT COMMAND 

De-orbit Phase: First de-orbit command to aerodynamically reoriented for 
reentry. 

ALIGNED FOR 

Reentry Phase: End of de-orbit to pilot chute deployment. 

REENTRY 

PILOT CHUTE 

Terminal Phase: From pilot chute deployment to impact. 

DEPLOYMENT 

IMPACT 

Post-Recovery Phase: Impact to experiment and data delivered to PI, and 
simultaneous ground control experiments completed. 

MISSION COMPLETE 

Refurbishment: The disassembly, inspection, cleaning and repair necessary to 
return the RRV/PM hardware to flightworthy condition. 

GROUND TESTS 

ttmnnrl Control Exnerimenl. Tests to (1) verify the experiment design, (2) 
verify the hardware biocompatibility and performance, and (3) serve as a flight 
experiment control. 


5 . 1 Pre-Operations 

The Pre-Launch Phase, as defined in the RRS SRD, begins with the initiation of a given 
mission and includes both Pre-Operations and Launch Base phases. In reality, several payload 
missions are likely to be processed in parallel and the actual launch sequence determined well into 
the program after visibility is gained into the developmental problems of each of the payloads. 

Since the SRD only established altitude/inclination limits, a set of Design Reference 
Missions (DRMs; Table 5-4) was established and information on the probable sequence of 
payloads (Table 5-5) was assessed. This assessment indicated that shared launches are to be 


5-3 




Table 5-4. RRS Design Reference Missions 


• SEVEN DRMs REVIEWED FOR RRS APPLICATIONS: 


DRM # 

Character 

Inclination 

Altitude km 
(nm) 

Orbit 

Type 

Launch 

Site 

Recovery 

Site 

1* 

Land Recovery 

33.83° 

350 (189) 

■ 

ETR 

WSMR 

2* 

High Altitude 

33.83° 

900 (486) 

1 

ETR 

WSMR 

3* 

High Inclination 

98° 

897 (484) 

Circ, Int 

WTR 

WSMR 

4 

Integer Orbit 

35.65“ 

479 (259) 

Circ, Int 

ETR 

WSMR 

5 

Water Recovery 

28.5° 

350 (189) 

Circ 

ETR 

Water (ETR. 
WTR. Gulf) 

6 

Dual Altitude 

33.8° 

350-900 

Circ 

ETR 

WSMR 

7 

High Altitude 

33.8° 

<X3TO 

Elliptical 

ETR 

WSMR 


* Primary DRMs 
Abbreviations: 


DRM Design Reference Missions 
Circ Circular 
Int Integer 
ETR Eastern Test Range 


WTR Western Test Range 
WSMR White Sands Missile Range 
Gulf Gulf of Mexico 


Table 5-5. NASA LifeSat Mission Planning 


Phase 

Date 

Orbit 

Duration 

Experiment 

Initial Phase 

Dec 1994 

90/800 km 

£30 days 

Cells, etc. (+ comp, satell.) 


Dec 1995 


30-60 

Cells, etc. 




30-60 

Cells, etc. 


Sep 19% 


45 

Plants 



45-60 

Cells, etc. 


Jun 1997 


>60 

Lower order organisms 


or 


>60 

Lower order organisms 



E83 1 

>60 

Lower order organisms 


Dec 1997 

90/ellip 

30-60 

Rodents/LOO 
(+comp. satell.) 

Second Phase 

<97 H-n 

34/250 

30 

Micr-g bioprocess 


<98 Ariane 

polar/250 

45 

Plants 


1999 

34/250 

30 

Squirrel Monkey 


2000 

polar/250 

>60 

Radiation Countermeasures 
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considered with first launch opportunity. Furthermore, the information indicated that 6 of the first 
8 RRSs may be launched on first 5 boosters (1/2/2/2/1), with second launch placing vehicles in 
two different orbits. When the mission information was integrated with the potential launch 
options (Figure 5-1), the Delta and Atlas, two launch-proven vehicles, were clearly the primary 
candidates (Figure 5-2). Consideration was also given to scaling the vehicle (Figure 5-3) to fly a 
smaller payload on a smaller, theoretically less expensive, booster. However, the results 
supported the dual launch of the larger vehicle as the most cost-effective approach. 

5.1.2 Pre-Operations Phase 

The Pre-Operations Phase involves the selection of the payload for a given flight, the 
mission planning for that flight, the verification of the experiment’s operation and any 
biocompatibility testing that may be required. The key operational consideration is to allow the 
payload selection to be as close as possible to launch site operations, minimizing the compounding 
of already costly payload problems with cost/schedule impact on the RRV effort. To minimize 
potential integration risks, payload and vehicle emulators (Figure 5-4) have been included in the 
program to validate RRV/PM compatibility prior to shipment to the launch site. 

5 . 2 Mission Operations 

Mission operations are driven by the vehicle's on-orbit mission profile and supported by 
appropriate ground operations. The key consideration is to minimize the cost of the ground 
support by making the vehicle operations as independent as possible. 

5.2.1 Vehicle Operations 


Vehicle operations (Figure 5-5) include all five operational phases: Launch Base, Launch, 
Orbital Flight, Recovery, and Post-Recovery. Of these. Launch Base, Orbital Flight, and Post- 
Recovery have the most important "Science Friendly" considerations. All vehicle operations, 
including the de-orbit bum, are sufficiently autonomous to preclude the need for TDRSS coverage. 
However, ground control visibility into selected operations (e.g., de-orbit bums, tri-mast 
operations) will probably be requested to ensure positive human control of critical operations. 

5.2.1.1 Launch Base Phase. The Launch Base Processing involves the RRV/PM 
integration and all other launch site activities. The key considerations are minimizing the Integrate- 
to-Launch Timeline and the provision for late Pre-Launch Access, the latter being driven 
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Figure 5-1. Launch Vehicle Options 
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Figure 5-3. Scaled Vehicle Configurations 


VARIED PAYLOADS REQUIRES TIGHT INTERFACE CONTROL AND POSITIVE 
VALIDATION PROCESS 

- Payload Provides PM Emulator (PME) 

- RRS Provides Vehicle Emulator (VE) 

- PME/VE Test Provides Initial Interface Validation 



PM 



VE 




• VE Provides Positive Validation 
of RRV/PM Interface and Capability 
for Early Integrated Test of 
Flight PM 


• PME Provides Interface for 
Assembly/Refurbishment Testing 
and the Capability for Preliminary 
Integrated Systems Test 

TOR42E/13 


Figure 5-4. Pre-Operations Checkout 

by the requirement to permit final experiment installation at up to T-12 hours and closeout as late as 
T-4 hours. Further complicating the process is the need to be able process two payloads for a 
single launch. The Launch Vehicle Adapter approach (Section 6.3) selected by SAIC allows 
parallel processing of the payloads (Figure 5-6) at the launch base, but requires additional detailed 
analyses to confirm the actual achievable timeline for the dual payload. 

5.2. 1.2 Launch Phase. The Launch Phase (Figure 5-7) begins with liftoff (first motion) and 
continues to RRS separation. SAICs proposed use of GPS allows immediate determination of the 
RRS orbit without any ground support beyond telemetry reception and provides the ability for 
immediate vehicle attitude control (Figure 5-8). 

5.2.1.3 Orbital Flight. The Orbital Phase begins upon insertion (RRS separation) and 
concludes with first de-orbit command. The original program requirements were for a mission 
duration from a few up to a maximum of 60 days at altitudes from 350 to 900 km and inclinations 
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Figure 5-5. Vehicle Operations 
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Figure 5-6. Launch Pad Sequence 
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USE OF BASIC GPS CAPABILITY ENABLES IMMEDIATE 
DETERMINATION OF POSITION AND VELOCITY 

4* i/M-nTi/Ml. 


- GPS Receivers on During Launch 

- Data Could Be Provided to Launch Vehicle 


n/FHICLE ATTITUDE CAN BE IMMEDIATELY 
DETERMINED IN ANY RANDOM ORIENTATION. 

* i I AlAfC iMMPniATF' 


- insertion Error Correction 

- Orientation to Preferable Power and Thermal Conditions 
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Figure 5-8. GNC Launch Phase 


torn 34 to 98 degrees. However, current NASA planning CTable 5-5) includes missions varying 
L 250-km circular at 34-degree inciination to a 200x30000 km orbit a, * 

and missions from £30 to >60 days. A payload capacity of approximately '1000 pounds 
required to fuif.ll the RM requirement to fly 18 «X>-gm nns for 60 days (1080 rodent-days. up 
375% from the original 288 rodent-day requirement). The key consideration ,s to provide an 
efficient means of on-orbit anomaly identification and resolution. 

5.2.1.3.1 Pre-Mission Checkout. The initial on-orbit objective is to determine “ ' * e ' ^ 
arrived witiiou, damage and is capable of performing the intended mission (Figure 5-9). The Pr 
Zl Checkout is performed in die Cosed configuration to allow .mmedtate recove^ wnh 
minimal activity if pmblems exist. The final step of die Pre-Mission checkoutisdm 
the deployable ni-mast to the appropriate length. Although the extension of tile Miih y 
automatic and self-safng in the even, of failure, TDRSS tracking support will probably be 
scheduled to provide ground control visibility into the operation. 
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Magnetometer 
Provides Independent 
Attitude Reference 



GPS Provides 
Immediate Orientation 
Information (<0.05°) 


Thermal Design 
Allows Extended 
Closed Operations 
on Battery if 
Orbit Corrections 
Are Needed 



Immediate All Systems Checkout 
for Mission "GO" Decision 

Capable of Limited 
Non-Extended Operations 



Off-the-Shelf 
TT&C Equipment 
Ensures Compatible 
Interface With 
NASA Tracking Network 
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GPS Location Information 
Provides Immediate 
Indication of 
Injection Success 


Figure 5-9. Pre-Mission Checkout 


5.2.1.3.2 Mission Operations. The system must be capable of providing a gravity 
environment which can vary from microgravity (lfr^ g maximum with < 10' 5 g > 95% of the time) 
to artificial gravity (0.1 g to 1.5 g (1.0 g for animals) controlled to ±10%) within a single flight. 
Although the SRD PM requirements do not include simultaneous micro and artificial gravity 
experimentation, the EBM, which can be configured to use a centrifuge for artificial gravity 
independent of the RRV, has the potential capability for simultaneous experimentation. 


a. Microgravity. Microgravity operations (Figure 5-10) will normally be in a "free- 
flight" mode initially positioned for the best thermal/power capability for a given 
mission orbital profile (Section 6.8). Ground contact requirements will be driven by 
the payload requirement for experiment control. Daily contact (twice daily is available 
without TDRSS; see TT&C Coverage Summary Report) is adequate to ensure vehicle 
safety in the event of an RRV anomaly since the RRV operation will automatically 
configure the vehicle into a safe mode in accordance with a preplanned priority. 
Momentum wheels will be used to cancel the angular momentum generated by any 
internal rotating devices and/or any thermal rotisserie required for thermal balance. 
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DEPLOYED MODULE 


• Extended Vehicle 
Provides for Power and 
Radiation Exposure 
Requirements 


• Momentum Wheels 
Provide Thermal 
Rotisserie About 
Long Axis Without 
Disturbing Microgravity 


• GPS and Magnetometers 
Provide Attitude 
Information for Torque 
Rod Attitude Control 



Closed or Extended 
Operations 


Minimize Extension to 
Minimize Gravity 
Gradient Effects 



MAIN 

MODULE 


ECLIPTIC 


• Magnetic Control 
Used to Minimize 
Power Consumption 
and [lG Disturbance 


• Astromast Extension 
Minimized Consistent 
With Mission Operations 
and PM Magnetic 
Environment 
Requirements 


• Thruster Control 
Available if Greater 
Control Authority 
Needed and/or TR 
Magnetic Field 
Undesirable 
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Figure 5-10. Extended Vehicle - Microgravity 


b . Artificial Gravity. Artificial gravity operations (Figure 5-11) will be initiated after 
initial checkout at the appropriate extension length in the microgravity mode. The 
vehicle is oriented for operation in the desired spin plane with momentum wheels used 
to create the necessary preferential inertia. The spin-up is done under IMU control 
using thrusters. The twice daily available coverage should be adequate if the full multi- 
redundant IMU control is used. For power limited missions, the control system 
redundancy can be powered down and more frequent checks made via TDRSS to 
ensure mission safety. The vehicle will be despun into the microgravity mode at the 
end of the gravity mission. 

5.2.1.3.3 Pre-Reentry Preparations. Reentry preparations (Figure 5-12) begin in the 
extended mode and include the retraction of the tri-mast. The IMU calibration and initiation of the 
tri-mast retraction will normally be scheduled during a ground pass, with TDRSS access scheduled 
for visibility into retraction operations. 
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Vehicle Rotates 
Within Orbital Plane 
to Provide Artificial 
Gravity Up to 1.5 G 




I 

EARTH 


Provide GPS/Scanwheel Crosscheck 
and Initial IMU Alignment 


Perform Precision GPS (- 0.05°) 
Alignment of IMU 


Retract Deployed Module Into 
Reentry Configuration 


GPS Data Used to Validate 
Orbital Elements tor Reentry 


IMU Aligns Vehicle tor Retroflre. 
Cross Checked by GPS Data 


Figure 5-12. Reentry Preparation 
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5.2.1.4 Recovery Phase. The Recovery Phase includes the De-orbit, Reentry, and Terminal 
Phases of the On-Orbit operations. Although defined as distinct phases, once the vehicle is 
committed to de-orbit, the RRV will automatically perform all required functions without need for 
human intervention. In fact, while ground control visibility into the operations via TDRSS will 
probably be scheduled, any attempt at human intervention in the process is more likely to create 
than cure a problem. 

5.2.1.4.1 De-orbit Phase. De-orbit operations (Figure 5-13) begin with the first de-orbit 
command and continue through aerodynamic reorientation for reentry. The operation is a "fail 
operational" process that is totally under IMU control, using GPS measurements for performance 
assurance. 


DE-ORBIT BURNS 




IMU ALIGNMENT 


MAIN BURN 


GNC/IMU Aligns Vehicle for Retrofire. 
Cross Checked by GPS Data 


AERODYNAMIC REORIENTATION 


Provide GPS/Scanwheel Cross Check 
and Initial IMU Alignment 

Perform Precision GPS (-0.05°) 
Alignment of IMU 

Retract Deployed Module Into 
Reentry Configuration 

Check IMU C Alignment 


GNC/IMU Realigns Vehicle for Reentry 
Cross Checked by GPS Data 


GPS Data Used to Validate 
Orbital Elements for Reentry 
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Figure 5-13. De-Orbit Operations 
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5.2.1.4.2 Reentry Phase. This is a totally autonomous phase which begins following the last 
de-orbit trim bum and continues until deployment of the pilot parachute. The deployment of the 
pilot parachute will be enabled at a preset time and activated by IMU control with a timer backup. 
GPS data will be used by the GNC to crosscheck the IMU operation. The reentry deacceleration 
shall not exceed 15 g axial nor TBD laterial. 

5.2.1.4.3 Terminal Phase. The terminal phase (Figure 5-14) is from pilot chute deployment 
to landing. The RRS shall have a near- vertical descent from an altitude of at least 60,000 feet with 
a 3-sigma impact dispersion of no more than ±6 km crossrange and ±30 km downrange. The 
atmospheric braking shall not exceed 2 g axial. Impact shall not exceed 10 g any axis. 


• TOTAL FAILURE DOES NOT CREATE PUBLIC HAZARD 



• GPS PROVIDE RRV LOCATION RELATIVE TO 
RECOVERY FORCES WITHIN 1 METER 

• POTENTIAL FOR 

- Real Time Wind Drift Assessment 

- Automatic Parasail Landing Accuracy 
Within 10 Meters 

- Landing on Prepared Surface 


• RRV TERMINAL RECOVERY 
SUBSYSTEM SIZED TO ALLOW USE 
OF LARGER CONVENTIONAL CHUTE 
SYSTEM 

- Less Risk 

- Large Recovery Area 


• HELICOPTER TRANSFER FROM 
LANDING AREA TO RECOVERY 
FACILITY 


• EXPERIMENT ACCESS IN LANDING 
AREA PROBABLY REQUIRED TO 
MEET 2 HOUR TIME LINE 
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Figure 5-14. Terminal Operations 
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5.2.1.5 Post-Recovery Phase. The Post-Recovery Phase begins with the vehicle landing 
and continues until the experiment and data are delivered to the PI and simultaneous ground control 
experiments are completed. The primary consideration is rapid post-recovery access. Physical 
access to the PM and removal of the flight animals shall be <2 hours, with thermal/electrical 
support via Ground Support Equipment (GFE) within 60 minutes of touchdown, and delivery of 
the RRS to the post-recovery facility within 2 hours. Actual estimates of the recovery timelines 
(Tables 5-6 and 5-7) indicate that the 2-hour requirement can be met except under unusual recovery 
circumstances. Removal of the EM at either landing site was considered, but the cost of providing 
the environmental protection for such operations in the general White Sands area makes the 
approach sufficiently impractical that Option 4 is not recommended. 

5.2.2 Ground Operations 

5.2.2. 1 Ground Control Experiment Module (GCEM). The objective of establishing a 
GCEM capability is to: 

a. Verify the experiment design 

b . Verify the hardware biocompatibility and performance 

c. Serve as controls for the flight experiments 

All of the above require an operation as close to on-orbit conditions as possible. This in 
turn requires: 

a . Payload Module (PM) that functionally replicates the flight PM 


b . Vehicle Emulator (VE) that functionally replicates the operating environment of the 
PM 

c. Operator’s console and associated GSE that both emulates the normal ground 
control interface and provides non-TT&C access to the: 

( 1 ) Vehicle mass memory 

(2) PM control/data bus 
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The key to the success of the GCEM operation is the degree of fidelity of the PM 
environment. The vehicle emulation should, for example, provide the same power system 
characteristics as the actual vehicle if the true system response is to be validated. The same is true 
for the data bus used for control/data. Similarly, the PM environment should replicate the 1 g on- 
orbit conditions to validate gravity sensitive orbital operations (e.g., fluid and debris flow, filter 
action, etc.) 

S.2.2.2 Mission Control. Since the RRS is not envisioned to be a real-time operation, and 
the GPS data will preclude any need for extensive tracking. Mission Control (MC) for the RRS 
will be a limited operation except during critical operations and or "sick vehicle" operations. Actual 
MC operations can be performed from any location having the real-time access needed for NATDN 
operations. 

5.2.2.2. 1 Mission Control Architecture. To minimize development and training cost, 
mission control for the RRS should replicate the console/GSE used for system testing and GCEM 
operations as close as possible. This approach also minimizes the amount of unique software 
development and ensures significant real operational test time on the software before it is 
committed to critical on-orbit use. Furthermore, because of the short duration of the RRS 
operational passes, the GSE should include enough of the GCEM equipment to permit validation 
of TT&C operations before the command/upload is released for use in a given pass. 

5.2.2.2.2 Operations. RRS operations are expected to fall into one of four categories: launch 
support, normal on-orbit operations, "sick bird" operations, and critical maneuver control. 


a. Launch Support. Although all RRS operations will be conducted autonomously, the 
mission controller is expected to want real-time visibility into the operation. Since the 
need is for visibility into the operation, not a detailed data flow, the data available via 
the low-data-rate TDRSS link will be sufficient. Sufficient command will available via 
TDRSS to "safe" the system if an anomaly occurs. 

b. Normal Operations. Normal support will consist of two or less 8- to 10-minute 
passes per Ha y depending upon the mission. The short duration of the pass requires an 
efficient operation using a pre-validated pass plan and command sequence. 
Downlinked data will be recorded for post-pass processing with minimal real-time 
visibility other than a basic State-of-Health display on the RRS MC console. 
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c. "Sick Bird" Operations. Whenever a significant anomaly occurs, the mission 
controller is expected to want extended real-time visibility into the on-orbit operation. 
Although the primary data dumps will be during the ground passes, there is a real-time 
need for safing the system and configuring the vehicle to obtain the necessary data for 
ground analysis. Adequate data/command capability for this type of operation will be 
available via the low-data-rate TDRSS link. 

d. Critical Maneuver Control. Although all RRS operations can be conducted 
autonomously, certain critical operations (e.g., tri-mast operations, de-orbit bums, 
etc.), the mission controller is expected to want the visibility into the operation. Since 
the need is for visibility into the operation, not a detailed data flow, the data available 
via the low-data-rate TDRSS link will be sufficient Sufficient command will available 
via TDRSS to "safe” the system if an anomaly occurs. 

5.3 Refurbishment 

The refurbishment cycle, which is defined in the SRD as the disassembly, inspection, 
cleaning, and repair necessary to return the RRV and PM hardware to flightworthy condition, 
actually begins with the RRV servicing that occurs during the recovery phase and includes 
transporting the vehicle to the refurbishment facility. The cycle (Figure 5-15), which is based 
upon the RRV manufacturing process and is discussed in Appendix A, is required to have the RRV 
ready for integration with another PM within 60 days of recovery from the prior mission. 
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Table 5-6. RRS Recovery Timelines 


Activity 

Time 

Uncertainty 

(min) 

Operational 

Design 

RRV Landing 

Landing contact until personnel arriva 

5 

10 

10 

Hazard Inspection and Sating 

Propellant lea k check, visual inspection, sate pyros, open circuit breakers 

10 

10 

5 

RRV Transportation Sling Installation 
Connect sling attachments, recover parachute 

5 

5 

10 

RRV Positioning and Stabilization 

Position crans and transporter, attach sting, lift RRV onto cradle, secure RRV, 
recover parachutes 

10 

10 

10 

Helicopter Transfer 

Engage sling/harness, transport, position on arrival, disengage sling/harness 

40 

15 

10 

Transfer to Post- Recovery Facility 

Attach restraints, move to facility, install work platforms 

10 

5 

5 

Reoovery System Canister Removal 

Position wortcstands, disconnect and cap wiring, remove structural fasteners, 
manually remove canister 

10 

5 

5 

PM Interface Disconnection 

Disengage power, disconnect interfaces, cap connectors, remove structural fasteners 

10 

10 

20 

PM Removal and Transfer 

Position crane, attach cable to PM, extract PM from RRS, transfer PM to GCEM 
support cart, instil fasteners, reconnect interfaces, turn on power and GSE support 

20 

10 

20 

Access to EM 

Remove cover to PM, attach Nft cable, remove animal cage 

10 

5 

5 
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Table 5-7. RRS Recovery Options 


Option 1 - Helicopter return of the RRV and EM access in the Post-Recovery Facility 

Option 2 - Helicopter return of the RRV with PM removal on facility apron and EM access in the Post-Recovery Facility 
Option 3 - PM removal at the landing site with helicopter transfer of the PM and EM access in the Post-Recovery Facility 
Option 4 - EM removal at landing site and EM access at landing site 


Activity 

Options | 

t 

2 

3 

4 

RRV Landing 

Hazard Inspection and SafWig 
RRV Transportation Sling Installation 
RRV Positioning and Stabilization 
Helicopter Transfer 
Transfer to Post-Recovery Facility 
Recovery System Canister Removal 
PM Interface Disconnection 
PM Removal and Transfer 
Accees to EM 
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n« co vary BaeeHneTIme a 

toNorthrop Strip Uneertolnty - 

Probable Time a 

0.833 hr. (50 min) 
0.401 hr. (24.5 min) 
1.234 hr. (74.5 min) 

1.333 hr. (SO mm) 
0.667 hr. (40 mm) 
2.000 hr. (120 mm) 

1.417 hr. 
0.667 hr. 
2.065 hr. 

(66 min) 
(40.9 min) 
(125.9 mm) 



BaeellneTIme ■ 

General White Sands 

Recovery Uncertainty ■ 

Probable Time a 

1 .500 hr. (90 mm) 
0.501 hr. (30.4 min) 
2.001 hr. (120.4 mm) 

2.000 hr. (120 mm) 
0.718 hr. (43.9 min) 
2.718 hr. (163.9 mm) 

2.083 hr. (125 mm) 
0.735 hr. (44.7 min) 
2.818 hr. (169.7 mm) 
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Figure 5-15. Manufacturing and Refurbishment Flow 




6.0 CONFIGURATION 


This section discusses the baseline design of the SAIC RRS configuration. The discussion 
begins with a quick overview of the design, then addresses the operational and developmental 
risks, and finally provides details of each module/subsystem. The intent is to identify and describe 
the design logic and drivers in addition to providing a compilation of design details. 

The SAIC approach is driven by the philosophy (Table 6-1) that the vehicle design should 
be responsive to the critical safety and science mission requirements, and that the affordability and 
operational efficiency of the program need not suffer in order to meet those requirements. This 
approach is founded on the basic belief that program development risk (technical and cost) is best 
minimized by applying existing component level technology in a manner that maximizes testability 
and nonserial scheduling. Furthermore, while space qualified components using S-level parts may 
be ideal for long duration space operations, use of such items should not be allowed to drive cost 
and schedule risk if less costly and readily available components exist that have proven capability 
for the projected mission environment and duration. This is especially true for a short mission, 
refurbishable vehicle such as RRS where redundancy in design is already driven by CONUS 
recovery fail operational requirements. 


Table 6-1. SAIC Design Philosophy 


#1 SAFETY 

- CONUS Recovery 

- Fail Operational/Redundant Systems 

#2 MEET SCIENCE REQUIREMENTS 

- 0- 1 .5 g With Negligible Gravity Gradient and Coriolis 

- 18 Rodent/60 Day Mission 

- Quick Access to Payload 

- Multiple Payload Accommodation 

#3 AFFORDABLE DESIGN 

- Minimal Development Risk 

- Off-the-Shelf Technology Where Possible 

- Innovation Where Advantageous 

#4 MINIMIZE OPERATIONAL SUPPORT 

- Use Existing Ground Support Resources 

- Minimize Refurbishment 
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Given the SAIC design philosophy, the NASA requirements did not create any significant 
design constraints (Table 6-2). Instead, generalized mission objectives that were described as 
important by NASA, but not quantified in the SRD, became the key items to be considered in the 
design to the extent that they did not drive the design. For example: 

• The vehicle shielding should be minimized to provide maximum experimental flexibility 
for radiation experimentation. 


• Ground control and on-orbit experiments should be absolutely identical, with the 
exception of the space radiation environment, to provide a true cross calibration that 
would clearly reveal unexpected space effects. 

• The vehicle should support up to six mid-deck lockers to be consistent with RMOAD 
planning. 

• There should be no nonstructural single point failure anywhere in the de-orbit to landing 
recovery process that could create a public hazard. 


Table 6-2. Design Constraints 


• NASA RRS SYSTEM REQUIREMENTS DOCUMENT 

- Did Not Create Design Problems, Flexible 

- Did Not Drive Cost 

• FLEXIBLE OPERATIONS 

- Controllable Radiation Exposure 

- Uniform Payload Environment 

- Exact 1G Ground Control Experiment 

- Simple STS Mid-Deck Locker Use 

- Fail Operational Reentry for White Sands Landing 

• BOOSTER - USE OF PROVEN BOOSTER HARDWARE 

- Single Launch - Delta to All Orbits 

- Adaptor Utilizes Existing Delta Hardware 

- Dual Launch 

- Delta to Lower Orbits/Inclinations 

- Atlas to High Orbits/Inclinations 


Similarly, if the intent of the program is really long-term recoverable access to space, 
booster considerations should cover the full RMOAD mission spectrum (including dual launches), 
emphasizing payload per unit life cycle costs. While any potential development cost risk should be 
minimized, that minimization should be in balance with and not override long-term operational 
savings. 
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The primary characteristics of the SAIC design are shown in Figures 6-1 and 6-2. The 
three module, multiassembly configuration allows science accommodation and cost/schedule risk 
minimization to be synergistic instead of competitive. The Deployed Module (DM) provides for 
the basic host satellite functions while the Main Module (MM) is the primary reentry vehicle body 
and contains the Payload Module (PM). These modules further divide into subassemblies that can 
be manufactured and refurbished in parallel to save cost and time. 

Although the mast is perceptively a major risk, multiple analyses have shown that the SAIC 
tri-mast approach is a viable design that provides multiple performance enhancements. Although 
the minimization of payload Coriolis effects (Figure 6-3) was the initial driver in the mast oriented 
design, the full 100 foot extension is only needed for low fractional gravity experimentation. A 
much shorter extension is sufficient for the critical 1 G earth comparative experimentation 
(~20 feet) and an even shorter extension (~10 feet) can generally provide the module separation 
necessary for the solar power and radiation exposure capabilities. More specifically, the mast 
configuration provides for: 


DEPLOYED MODULE 

• Spacecraft Subsystems 

• Launch Vehicle Interface 
■ Parachute 


PAYLOAD MODULE 

• Experiment Module 

* Support Module 


MAIN MODULE 

* Payload Support 

- Thermal 

- Data 

* Heat Shield 

* Crushable Nose 



GPS ANTENNA 
TDRSS ANTENNA 
100 POUND THRUSTERS 
0.5 POUND THRUSTERS 
SOLAR PANELS 

EARTH SENSOR 
(SCAN WHEEL) 


- ASTROMAST 


VEHICLE OPERABLE AT ANY 
LENGTH EXTENSION FROM 0 TO 100 


REENTRY 
HEAT SHIELD 
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Figure 6-1. Primary RRS Characteristics 
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OBJECTIVE: PARALLEL PROCESSING OPERATIONS TO SAVE SCHEDULE AND COST 


DEPLOYED MODULE 

Propulsion Subassembly 

Control Subassembly 
Solar Array 


PAYLOAD MODULE 

Experiment Module - 
Support Module 


MAIN MODULE 

Internal Assembly 
Heat Shield 




AFT Solar Array Replaced 
- One Time Use 

Propulsion, Astromast, Antenna and 
Recovery (Parachute) Components 
Need Extensive Inspection/Cleaning. 
Replace With New Subassembly and 
Place Refurbished Item Into Spares. 

Electronic/Electrical/Thermal 
Components Inspected/Tested 
and Replaced as Needed. 

FuN GNC Configuration Until 
Mission Defined. 

All Structure Inspected for Damage/Fatigue. 

Refurbishment Is Payload Dependent. 
Rodent Version Would Require Extensive 
InspectkxVCIeaning. ECLSS Reusable. 
Individual Cages Replaced. 

Electronic/Electrical/Thermal Components 
Inspected^ ested and Replaced as Needed. 
Thermal Motors/Huid Replaced. 

Replace Heat Shield and Crushable 
Nosecone. 
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Figure 6-2. Modular Manufacturing and Refurbishment Concept 



baseline, MAST EXTENSION 

-2 FT. I 

DERIVED FROM: "PHYSICAL CONSIDERATIONS OF ARTIFICIAL GRAVITY" tor42B/oi« 
D. B. CRAMER, TETHER IN SPACE" WORKSHOP. JUNE 1983 

Figure 6-3. SAIC Fractional Gravity Approach 
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• A near uniform payload volume gravitational environment 

• Exact replication of the orbital gravity environment (Figure 6-4) in a ground control 
experiment 

• Use of the solar arrays to eliminate stored energy capacity (batteries or otherwise) as a 
major mission limiting factor for both total power and mission duration. 

• Virtually hemispherical free space radiation exposure (Figure 6-5) that puts the 
experimenter in almost total control of the radiation spectrum. 

• Experimentation with the full six mid-deck lockers capacity used in the RMOAD 
planning (Figure 6-6). 


• SAIC GCEM PROVIDES EXACT DUPLICATE OF FLIGHT SYSTEM 

- All Significant Accelerations in Same Direction 

- Identical Subsystems Used (ECLSS, Power, Lighting, Nutrients, Etc.) 


• VALIDATES FLIGHT DATA 
- With Bulit-ln Time Delay, 
Repeats In-Flight Events 


GROUND 

TEST 

MODULE 


VEHICLE EMULATOR 


• ALLOWS DETERMINATION 
OF EFFECTS OF SPACE 
ENVIRONMENT 
(RADIATION, G's) 


GROUND CONTROL EXPERIMENT MODULE 


• PROVIDES PRE-FLIGHT VERIFICATION OF PM 
COMPATIBILITY WITH EXPERIMENT 
SUBJECTS 

- Detects Toxidty, Test Subject Sensitivities 


• HANDLING, SUPPORT EQUIPMENT 
FUNCTIONALLY IDENTICAL TO FLIGHT PM 
EQUIPMENT 
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Figure 6-4. Ground Checkout and Experimentation Control 
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■ EXPERIMENTER CONTROLS EXPOSED PAYLOAD SHIELDING 
Individual experiment volume shielding can vary 


Figure 6-5. Free Space Radiation Exposure 

The centralized payload volume also allows the payload module scaling (Figure 6-7) that 
would be necessary for potential scaled down vehicle configurations (Figure 6-8). However, 
while the scaled down approach may be attractive for possible use on the Taurus, the weight-per- 
unit payload, and therefore cost per unit payload, increases by about two-thirds for only about a 
50% per launch cost savings. This is in addition to the nearly a factor of 2 increase in science cost 
if the full 18 rats must be flown to obtain the necessary experimental statistics. 
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I 


EXPANSION 

VOLUME 



EXTENDED PAYLOAD 
CONFIGURATION 



Figure 6-6. Variable Mid-Deck Locker Capacity 
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SMALLER VEHICLES HAVE REDUCED REDUNDANCY, INCREASED 
SAFETY RISK FOR CONUS RECOVERY 


SIGNIFICANT NEW/MODIFIED HARDWARE DEVELOPMENT INCREASED 
COST/SCHEDULE RISK LOSS OF SPACE QUALIFIED HERITAGE 

RRV EXTERNAL DIMENSIONS 



600 GM RODENTS 

18 

15 

12 

9 

6 

WEIGHT 

3944 

3602 

3046 

2495 

2135 

POWER 

245 

204 

156 

125 

98 

BASE DIAMETER 

95 

88 

77 

68 

61 

LENGTH 

116 

107 

94 

84 

75 

WEIGHT/RAT 

219 

2/DELTA 

240 

254 

277 

356 

<1/TAURUS 
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Figure 6-8. Scaled Vehicle Configurations 

In su mmar y, the SAIC design approach (Table 6-3) emphasizes public safety and science 
accommodation, with the use of the deployable tri-mast being a key element in the vehicle's unique 
performance capabilities. The following sections will discuss in greater detail the design features 
(Table 6-4) that make the SAIC design a unique approach for low risk, flexible, space 
experimentation. 
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Table 6-3. Design Approach 


• PUBLIC SAFETY 

- Fail Operational Reentry Operations 

- Multiple Failure Tolerant 

- Liquid, Multi-bum Multi-Thruster Design 

• SCIENCE REQUIREMENTS 

- Flexible Operations 

- Radiation Exposure 

- Uniform Payload Environment 

- Large Unrestricted Volume 

- Long-Term Mission Power 

• VEHICLE 

- Astromast - Multi-Failure Tolerant 

- Provides Operational Flexibility 

• Environment, Coriolis, Power 

• Exact On-Orbit Ground Test Environment 


Table 6-4. Key SAIC RRS Design Features 
- Low Risk Flexible Space Experimentation - 


• VEHICLE 

- Highly Controllable, Multi-Redundant Control/Propulsion Approach 

- Ensures Public Safety During CONUS Operations 

- Provides Minimal Risk Initial Operations Orbit 

- Solar Array Power 

- Up to 407 Watts Available (Mission Dependent) 

- Eliminates the Mission Constraints Imposed by a Stored Energy System 

- Single/Dual Launch Vehicle Adaptor 

- Minimizes Risk Through Use of Proven Delta Hardware/Technology 

- Simplifies Satellite Interface/Access/Deployment 

• PAYLOAD 

- Low Vehicle Shielding, Gravity Gradient and Coriolis Levels 

- Allows Gravitational Experimentation in Maximum Space Radiation Spectrum 

- Flexible Operating Configuration 

- Permits Variable Experimentation Within/Among Various Missions 

- Permits Specimen Configurations From 18 Rats to Group 2 Nonhuman Primates 
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6.1 Program Risk 


The risks that face a program such as the RRS involve both operational and developmental 
considerations. Although not totally separable, if the operational risk is unacceptable, the program 
is not viable no matter how low the developmental risk can be perceived. Similarly, if the system 
is to provide long-term, cost-effective access to space, the vehicle's scientific flexibility/utility and 
program life-cycle cost should be carefully balanced with the developmental risk. SAIC has, 
therefore, taken a carefully balanced approach (Figure 6.1-1) in which some developmental risk is 
considered acceptable if significant operational risk mitigation can be achieved. 


FIRST PRIORITY - MITIGATION OF UNACCEPTABLE 
OPERATIONAL RISKS 

PUBLIC SAFETY - A Fail Operational Reentry/Recovery Process 


SAIC - A REQUIREMENTS DRIVEN APPROACH 

Most Subsystem Risk Comparable to the NASA Phase A Approach 

New Approaches for Key Operational Requirements 

Propulsion, GNC, Power, Deployable Tri-Mast 


OPERATIONAL RISK MITIGATION WORTH SOME DEVELOPMENTAL 
RISK WHEN SIGNIFICANT TOTAL PROGRAM ADVANTAGES CAN 
BE ACHIEVED 

LIQUID PROPULSION SUBSYSTEM - Chosen for Public Safety; 
Minimizes Cost/Schedule Risk From Late Payload Changes; 

Allows Multi-Orbit Missions. 

GNC - GPS Use Reduces Operational Cost Risk by Minimizing On-Orbit 
and Recovery Force Tracking Requirements. 

DEPLOYABLE TRI-MAST - Provides Modularity Which Further Reduces 
Manufacturing and Refurbishment Cost/Schedule Risk. 


SOFTWARE DEVELOPMENT RISK REDUCED BY: 

Use of Proven "Hard Real-Time" Computer Environment 
With Proven: Software Development Tools 

Real-Time Debug of Executing Code 


Figure 6.1-1. Risk Mitigation - A Total Program Approach 






The SAIC approach to a safe CONUS recovery is a good example of such considerations. 
If a CONUS recovery is required by the RRS to achieve scientific objectives and minimize 
operational cost, public safety must be the premier risk mitigation issue in system design. Once 
committed to a CONUS recovery, the system must be able to identify and mitigate any single-point 
failure without ground intervention if that failure can result in a landing outside of the designated 
safe recovery area. Similarly, no single point failure should be permitted that could ultimately 
result in the uncontrolled reentry of a "dead" vehicle into a populated area. The result was the 
decision to use multi-element liquid propulsion and control subsystems that use proven 
components and technology to ensure a "fail operational" reentry process. 

6.1.1 Operational Risk 

The foundation of the operational risk assessment is the efforts documented in the Payload 
Hazard Analysis (Appendix C) and Preliminary Reliability Assessment (Appendix D). The 
mission functions were assessed from launch to landing (Figure 6.1-2) and each subsystem 
analyzed for failure modes and their criticality. 

In general, the redundant architecture approach, which is discussed detail at the subsystem 
level, results in a configuration that meets the SRD reliability requirements without creating a major 
vehicle weight impact. Similarly, the use of existing components provides a heritage that 
significantly contributes to the credibility of the reliability assessment. The individual subsystem 
Failure Mode Effects and Criticality Assessments (FMECAs) are included in Appendix C. 

Various approaches have been used to mitigate potential operational risks from launch 
through landing. More specifically, the key elements of mission success include: 

a. Launch Operations. A preliminary analysis of the launch hazards indicates that use 
of a destruct charge in the RRS would: 1) create a debris pattern that is a greater hazard 
than the vehicle itself, and 2) significantly complicate and enhance the ground crew 
hazard during the post-landing recovery process. Furthermore, depending upon the 
time of powered flight termination, the recovery subsystem could potentially provide a 
means of safe payload recovery. Although the RRS Emergency Recovery Process 
(ERP), conceptually described in the Launch Vehicle Interface portion of the Structures 
section, is clearly not a guarantee of safe recovery, the process could potentially 
mitigate the less than 0.99 probability of booster flight success sufficiently to achieve 
the required (SRD) 0.99 probability of safe recovery for the entire mission. The RRS 
alone currently meets the requirement. 
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b. Orbital Operations. All subsystems, with the exception of the structure 
components, are fully redundant, and critical elements have been made multiply 
redundant to provide a fail operational capability. Perceptively, the greatest risk is a 
retraction failure of one or more of the deployable tri-masts. However, this failure 
mode has been mitigated through the use of retraction redundancies to the extent that the 
use of the mast is no longer considered to be a significant risk. The critical GNC 
subsystem architecture was established based upon a set of GNC design priorities 
(Figure 6.1-3) that resulted in a function based variable level of redundancy within the 
subsystem that provided the needed fail operational characteristics without causing an 
over redundancy for the entire subsystem. 


FUNCTIONAL SUPPORT AREAS 

PROPULSION ATTITUDE SUBSYSTEM DATA 

CONTROL CONTROL CONTROL HANDLING 

- PUBLIC SAFETY - 

Control Alignment 
Propulsion Control 
Reentry Orientation 

- VEHICLE SAFETY - 

Vehicle Attitude Control 
Structure Dynamics 
Mast Extension/Retraction 
Spin-up and Stabilization Control 
Thermal Balance 
Power Load Shed Control 
Parachute Operations 

- MISSION SUCCESS - 

Subsystem/Payload Command and Control 
Data Handling/Storage and Telemetry 


Figure 6.1-3. GNC Design Priorities 

c. Reentry Operations. The reentry process uses a fail operational multiple 
redundancy approach for both the propulsion and control functions that allows the 
system to automatically overcome multiple failures without degrading the landing 
accuracy and creating a public safety hazard. The reentry bums (main and trim) are 
accomplished using a "hot-redundant" triple-thruster system which is three-axis 
controlled by the GNC’s triply redundant processor/IMU configuration. The accuracy 
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of this process is such that the vehicle will impact well within the required 6x30 km 
landing zone if there is total failure of the parachute recovery system. 

d. Landing Operations. A major safety consideration is the first flight concern over an 
unexpected failure irrespective of the magnitude and success of pre-flight analyses and 
test. A preliminary analysis of this concern indicates that the initial launch should be 
recoverable into WSMR with public safety comparable to current launch base 
operations. This is based upon use of the low population density corridors (Figure 
6.1-4) available for access into WSMR, one of which is in the 52 to 56 degree 
inclination range desired for the first flight. This also assumes that the RRS would not 
include a destruct charge which could cause damage/injury beyond the immediate 
impact area. There should be no significant propellant hazard since normal RRS 
operations are planned to leave minimal residual fuel for quick post-landing access. 
However, a detailed flight path analysis must be done to firmly establish the probability 
of damage/injury for the specific mission. 

6.1.2 Developmental Risk 

The developmental risk is a combination of technical (hardware, software, test), schedule, 
and cost considerations, all of which are driven by subsystem development and manufacturing 
considerations. 

6.1.2.1 Hardware Risk. To assess the basic technical risk, a Development Risk Assessment 
(DRA) was performed on each subsystem to establish the relative development risk of the SAIC 
design. These DRAs, similar in concept to the FMECA, indicated that the vehicle development 
risks do not differ greatly from the NASA Phase A concept except for requirements driven 
variations. For example: 

a. many subsystems are virtually identical to the subsystems needed in the Phase A 

concept. 

1 . Recovery (parachute). TT&C and Reentry Subsystems . These subsystems are 
virtually identical for the two concepts, and are proven technology not requiring any 
special development testing. 

2. Primary (non-mast) Structure and Thermal Subsystems . Although not identical to 
Phase A, these subsystems are very similar to the Phase A concept, and are proven 
technology not requiring any special development testing. The 20-degree sphere cone 
shape was selected partly because of the data that already exists for this configuration. 
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Figure 6.1-4. Minimal Risk CONUS Recovery Flight 



b. three subsystems which vary significantly from Phase A are an adaption of proven 
design! components specifically selected to meet critical operational requirements. 

1 . Power Subsystem . Although different from the Phase A, the SAIC design provides 
greater power and eliminates mission duration constraints. The design has minimal 
development risk since the components are existing space technology with one 
exception, the tri-mast AC power transmission system. Although the AC approach, 
used to mitigate interaction with the earth's magnetic field, is based upon proven 
technology, the hardware components would have to be qualified for RRS 
application. The program risk is considered to be minimal since the AC approach is 
not required for the short deployment lengths anticipated for the initial missions. 

2. Propulsio n and GNC Subsystems . As discussed above, these subsystems are 
significantly different from the Phase A concept to provide the multi-failure 
tolerance needed for CONUS recovery public safety considerations. Again, the 
design is an integration of proven space technology/components with two 
exceptions, the need to space qualify the GPS receiver and the radiation hardness of 
the SANDAC computer. 

(a) The GPS receiver risk is mitigated by the fact that the TI GPS receiver is a 
field proven design that can operate at up to synchronous altitudes without 
modification. Furthermore, TI is experienced at qualifying their GPS 
receivers for space flight applications (e.g., the Minuteman III "Fly-Two" 
program), and the TI receiver has been previously proposed to, and 
technically accepted by, GSFC for a shuttle experiment. 

(b) The SANDAC radiation hardness is really two issues which need to be 
addressed separately. First, short flight durations of the RRS hold the total 
dose radiation environment well below that expected for most satellites and at 
a level that is well within the capability of the SANDAC in the RRS time- 
frame. Even the RRS "radiation" mission, whose objective is biological 
exposure to the deep space radiation spectrum, not high total dose, is not an 
exceptional electronics radiation environment. The second question, the 
single event upset caused by high energy particles, is a low probability event 
best considered as a probabilistic single point failure. Therefore, since we 
know of no evidence of any occurrence of an SEU in SNL's operational 
history, and the processing architecture already implemented to eliminate 
critical single point failures in the "fail operational" process precludes 
significant SEU impact, the SEU risk is minimal. 


c. other variations from the Phase A design are a unique application of proven 
technology! components specifically selected to meet unique, design driven 
requirements. 


1. Deployable Tri-mast Structure . Used to provide free space payload radiation 
exposure, added power capacity, and a uniform artificial gravity environment, the 
tri-mast is clearly a unique application of existing technology. However, the full 
100-foot length is needed only for low gravity Coriolis mitigation, all components 
(Astromasts) are space proven, and three independent assessments of the tri-mast 
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structural concept have supported the initial estimates of structural integrity. 
Furthermore, the redundant retraction mechanism provides the space proven cable/ 
reel capability needed for power transmission between the two vehicle modules, 
and as such provides the retraction redundancy at virtually no weight cost 

2 . Launch Vehicle Adapter . Another major consideration was the design of a Launch 
Vehicle Adapter (LVA) which used proven hardware and implemented a 
vehicle/adapter interface which was a sufficiently simple adaption of proven 
technology to minimize the qualification testing and associated costs. This was 
achieved by adapting existing Delta interstage and fairing hardware (Figure 6.3-38) 
and using a simple, proven Marmon clamp interface (Section 6.3). 

6.1.2.2 Software Risk. The greatest program risk in software is the lack of attention typically 
given to software risk in the initial program planning stages and/or the lack of emphasis on the 
hardware architecture and integration difficulties which almost always become the program driving 
aspect of software risk. Unless the code is exceptionally complex, which is not the case for the 
RRS, the actual generation of the code is rarely the major software risk. This rationale led S AIC to 
emphasize processor selection and the integrated test environment in the software risk mitigation 
process. 

a. Processor Architecture. The overriding requirement for the RRS processor is a 
space proven capability to operate accurately and efficiently in the real time, redundant 
computation environment required to ensure a "fail operational" reentry process. To 
minimize this risk, SAIC selected the flight proven SANDAC computer. This 
computer, the operating system, and the associated test tools, were developed by 
Sandia National Laboratories (SNL) specifically for the RRS type of environment. 
Furthermore, SNL's highly successful operational record in numerous reentry test 
flights clearly demonstrates the compatibility of the SANDAC operating system with 
the type of control algorithms typical of the RRS applications. The systems operational 
architecture, described in detail in Section 6.6, permits a "lock step" type of parallel 
processing that permits redundant computations to be checked virtually line-by-line 
when needed for "fail operational" considerations. 

b. Test Environment. A few "bugs" in an excellent code can be an integration 
catastrophe if the test tools needed to identify and eliminate the "bug" are either non- 
existent or sufficiently disruptive of the operational environment to preclude problem 
identification. The later problem is especially critical in a real-time computational 
process in which the problem may be timing related and the test cannot be done without 
altering the timing. SNL recognized this problem and devised an integrated test 
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approach for the SANDAC operating system and test tools that provides full, near real- 
time, software logic visibility without altering the operational process — a virtually 
unattainable capability for most processing systems. 

6.1.2.3 Test Risk. If the system design is based upon proven technology, the greatest 
program risk is the lack of foresight in planning and executing the integration and test phase of the 
development. All operating modes and potential critical failures must be testable and adequately 
tested if operational success is to be ensured. The test risk is best minimized by levying testability 
and manufacturing modularity as a design requirements, and by ensuring early consideration of test 
requirements (e.g., the use of test specifications). To mitigate this risk, SAIC ensured that, with 
the exception of the deployable tri-mast, every subsystem in the SAIC design, including propul- 
sion, is fully testable during both manufacturing and refurbishment. Even in the case of the tri- 
mast, test approaches have been developed to ensure full integrated ground testing of the deploy- 
ment/retraction process. Only the unconstrained zero G operation must fully depend on simulation 
for validation and even in that case all critical simulation parameters are verifiable by test 

6.1.3 Cost/Schedule Risk 

Cost and schedule risk (CSR) are intradependent with each other and with the operational 
and development risk discussed above. Furthermore the minimization of one element of the risk 
may increase the risk of a different consideration. The solid/liquid trade discussed above is a clear 
example of the decrease in development risk being outweighed by a much greater increase in 
operational risk. Similarly, while the CSR must be considered for both the initial manufacture and 
the refurbishment, "simple" designs that appear to have low CSR because of a lesser complexity 
may have an overriding integration and refurbishment CSR due to difficult maintainability — a 
major factor in the SAIC decision to modularize the overall design. This example also emphasizes 
the point that while CSR is partially driven by the above technical considerations, there are much 
more sensitive manufacturing/integration considerations that are system vice subsystem driven. 
Three key factors are involved in the assessment of these risks: 

a. Amount of Development. As discussed above, SAIC has minimized this risk by 
developing a design that primarily integrates existing components and technology into a 
unique architecture. Most of the hardware, other than the primary structure, is used in 
the existing available configuration. The deployable tri-mast is the hybridization of two 
current, space-qualified designs that operate independendy in the existing flight-proven 
mode. The sole purpose of the hybrid configuration is to provide retraction 
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redundancy. No hardware other than the primary structure and heat shield is newly 
developed, and in the case of the structure/shield, the design is an application of proven 
technology. 

b. Schedule Serialism. The modular SAIC design was specifically developed to create 
a parallel manufacturing/refurbishment flow. This approach and the projected RRS 
development schedules are described in the manufacturing plans (Appendices A and B). 
The activity overlap characteristic of this approach both shortens the nominal schedule 
and mitigates the potential schedule risk of a serial schedule by minimizing contention 
for the limited vehicle work space and the impact of component failure. Although the 
acquisition of spares can also mitigate failure risk, the use of spares, unless carefully 
controlled, can add significant cost to the program (whereas schedule compression 
saves cost) and is not effective in the case of design problems. This aspect of sparing 
is addressed in greater detail in the System Cost Estimates Document 

c. Degree of Redesign. This factor can be a major driver and is a major element in 
most, if not all, major program schedule slips and overruns. The critical nature of this 
factor is clearly demonstrated by the major role it plays in the cost and schedule 
estimates made by PRICE H (discussed in Section 7.0 and the System Cost Estimates 
Document). To mitigate this risk the SAIC/Fairchild approach assumes implementation 
of a Schedule Assurance Program (SAP). 

6.1.4 Overall Assessment 

The above discussion clearly indicates that the relative risks of the SAIC and Phase A 
designs are very similar with the exception three areas. However, while these areas (propulsion, 
the deployable tri-mast, and vehicle control (GNC)) are significant, and do represent some 
additional developmental risk, we believe they actually reduce overall program risk and cost. 

a. Propulsion. Although public safety is the driving reason for the selection of the 
liquid propulsion system, the flexibility of the liquid propulsion system has major 
performance/cost/schedule advantages over the use of solid motors (as discussed in the 
Propulsion Trade Study and Section 6.5) for RRS type of operations. 

• Liquid propulsion permits virtually "last minute" adjustments to compensate for 
payload variations (up to and including a completely different module) while the 
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solid performance must be specified early in the solid procurement cycle and suffer 
significant cost and schedule impact for late changes. 

Liquid propulsion provides the capability to make significant orbit changes during 
die mission while the solid approach requires an additional stage and the associated 
development/cost/schedule impact on the RRS and/or the booster interface 


b. Deployable Tri-Mast. Although performance (radiation exposure, power, 
gravitational environment) is the driving factor for the tri-mast design, the resulting 
modularity contributes sufficiently to the overall manufacturing, test, and refurbishment 
savings to compensate for the added cost of the tri-mast 


c. Vehicle Control. Although the complexity of the GNC is primarily driven by public 
safety (the IMU and use of GPS) and the control of artificial gravity operations (IMU 
and momentum wheels), the overall operational utility of the system should provide 
compensating cost advantages within the context of the total program. 


1 . 


IMU. Since the IMU is an essential part of the use of liquid propulsion, this 
ot the GNC contributes to the propulsion advantages discussed above 


2 . 


GE£. The availability of GPS allows a major reduction (or even elimination) in the 
otherwise required ground tracking and minimizes the support required for recovery 


3. M flmgntum Whgfils - Required by S AIC’s artificial gravity concept's need to 
control vehicle angular momentum, this control feature will also permit 
compensation of the angular momentum created by any payload using a centrifuge 
to perform simultaneous artificial and microgravity experimentation. 
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6.2 Rodent Module 


This section presents the preliminary SAIC design for the Rodent Module (RM), using 
major contributions from Allied-Signal and Krug International in the environmental and data areas, 
respectively. Manufacturing of the RM (Appendix B) involves parallel fabrication of key elements 
by qualified subcontractors/vendors under the direction of SAIC, and SAIC integration of these 
elements into the final product. 


The design approach was intended to allow parallel development and manufacture of the 
RM and RRV without time-consuming combined testing prior to final integration at the launch 
base. This is an adaption of the GFE integration approach that has been used successfully on other 
programs. The success of this approach depends on strong, experienced, and active interface 
control and accurate documentation. Actual interface verification uses a vehicle emulator provided 
by the vehicle manufacturer, as described in Appendix A. Since this emulator simulates the exact 1 
g mission environment (and is the basic element of the Ground Control Experiment Module), the 
use of the emulator should allow full testing of the RM without adding time to the RRV 
development schedule. 

Adding to this confidence will be the RRV Engineering Test Vehicle (ETV) tests conducted 
by the RRV contractor. Since the shock, vibration, and thermal RRV/RM interface data obtained 
during ETV testing will be the initial validation of that critical design interface and the vehicle 
thermal/mass models, the data will be of equal and significant value to both the vehicle and payload 
contractors. These tests will require sufficient coordination to ensure valid simulation of the RM. 

The RRS is designed to be turned around between missions within 30 days as requested in 
the SRD. Combined with the 60-day maximum flight time, that will allow 3 flights per year, and 
30 missions over a 10-year lifetime. However, the provision of additional PMs will allow offline 
preparation of experiments and unique support requirements at the Principal Investigators’ 
facilities. In that way, the fully qualified and flight ready certified PM can be delivered to the 
spacecraft integration facility and the flight will be paced only by spacecraft readiness and launch 
vehicle availability. Some advantage might have been gained by providing an integrated PM 
design, with reduced structural and assembly interfaces, using total vehicle packaging. However, 
on balance, the conclusion was that modular design offers lower life-cycle costs and will gain the 
operational advantages of ready changeouts and subsystem replaceability. Consequently, the PM, 
as well as the RRV, has been designed with modular components and system elements to facilitate 
a short, economical turnaround process. Modularity also enhances the ease with which systems 
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may be replaced as newer, better systems become available on the market, and allows more rapid 
reconfiguration to accommodate different experiment requirements. 

Access to the PM, both on the launch pad and during post-recovery activities, was also key 
system design drivers. The pre-launch timeline requirement to provide access, up to 4 hours 
before lift-off and animal replacement up to 12 hours before lift-off, can be met. Launch vehicle 
imposed restraints on accessibility have been evaluated and are discussed separately in the Launch 
Tradeoff Study Summary Report. Post-recovery timelines were analyzed and quantified in the 
Recovery Tradeoff Study Summary Report. 

Although the scope of this effort was limited to the design of the Rodent Module (RM), the 
same design, with minor modifications, would be expected to apply to any payload that can be 
housed in the Experiment Module (EM) volume and use the basic environmental support provided 
by the Support Module (SM). 

6.2.1 Operation 


6.2.1.1 Pre-Launch. The RM design task was structured to define the approach that would 
best meet the late access requirement specified in the SRD. Late access on the launch pad, as well 
as rapid access to the RM after touchdown, have been achieved by designing the RM as a separable 
module, removable as a unit, and accessible with a minimum of disassembly. Access is proposed 
to be through the aft end of the RRV sphere-cone after removal of the recovery parachute container 
(avoiding the need for penetrating the heat shield). Removal of the connections provided on the 
RM access cover, and then the cover, provides access to the EM/SM upper surface. Disconnecting 
the various lines and cables at the top of the EM and detaching the hold-down fittings will allow the 
EM/SM assemblies to be hoisted above the RRV aft surface until the rodent cages are exposed. 
Individual rodent cage doors are then accessible and experiment samples may be removed and 
replaced as necessary. Cage- mounted or interfacing instrumentation, as well as food dispensers, 
lixits, lighting fixtures, etc., may be readily changed out without further spacecraft system 
disturbance. 

Access to the Support Module requires hoisting the EM/SM assemblies an additional 75 
meters to clear the RM/RRV housing. The launch vehicle shroud design will respond to the 
geometry, clearances, and connections implications. The design will minimize, or prevent, 
damage to connections when the shroud cap is removed for access. This will simplify on-pad 
recheck procedures, and enhance the the desired T-4 hours late access time goal. 
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6.2.1.2 On-Orbit. The RRS has been designed provide the capability to subject the 
experiment to any required acceleration between zero and 1.5 g's, plus or minus 10%, for the 
duration of the flight. The specified precision of ± 10%, at a fractional gravity of 0.1 g, will 
require controlling the required rate of rotation of 2.44 RPM to ± 0.772 RPM (0.0808 
radians/sec). The gentle rate of spinup/spindown provided by the SAIC RRS design will result in 
thruster firings of the order of 30 seconds or longer for this magnitude change in RPM, and 
presents no acceleration or precision problems. 

Artificial gravity levels will be controlled through the spacecraft control logic. The 
procedure will be to upload a commanded acceleration to an on-board CPU. The CPU will 
respond by comparing the commanded acceleration to the current acceleration level. The resulting 
error signal will be converted to a required RPM change, and a thruster firing duration will be 
calculated. The response will be iterative, with the residual error causing additional thruster firings 
until the acceleration sensor output and commanded g’s agree, within the allowable error band. 


The acceleration sensor loop will remain active in order to compensate for changes in 
acceleration resulting from center of gravity (CG) shifts and aerodynamic drag, except when such 
activity can interfere with other spacecraft functions, such as in the pre-reentry phase, or during 
extension or retraction of the Astromasts. 

6.2. 1.3 Recovery. As outlined in Section 5, the current mechanical design will permit 
immediate access, after touchdown, to the RM. Once the RM is removed from the RRV, the 
modular design of the RM allows the EM to be separated and returned to the P.I. 

6.2. 1.4 Refurbishment. RM modularity allows a very efficient refurbishment process, 
because subsystems and individual elements may be either replaced immediately, refurbished, 
and/or reintroduced later on the same or another RRV. For example, the PM may be used as a 
Rodent Module housing on one flight and then support the European Botany Module on the next 


PM refurbishment will begin at the spacecraft recovery facility after the EM has been 
removed and delivered to the post-flight science facility. The PM will be handled as a unit and 
returned to an overhaul and refurbishment facility after initial cleaning of the debris filter assembly 
and housing, which may contain residues or animal-generated debris. 

The filters will be removed and probably not cleaned for re-use, except for frames and 
metal parts. New filters will be installed after the PM has been thoroughly cleaned and prepared 
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for checkout tn a clean room facility. The ECLSS will be removed and sent to a specialized facility 
or partial disassembly, cleaning, replacement of UOH canisters, flushing and resealing of lines 
nets, and connections for the heat exchanger, fans, and check valves, and end-to-end check of the 
functionality and petfotmance of the ECLSS elements and overall system. 

All components of the PM are readily replaceable, based on condition or item life. Specific 
replacement catena exists for those off-the-shelf elements, such as the ECLSS and the 
Instrumentation System components. Replacement criteria ensures that, except for mission- 
peculiar and mission-consumed elements (such as LiOH, filteis, etc.), all elements of the ECLSS 
system will be compatible with multi-mission use. 


SAIC has contacted industry sources, and is in contact with NASA sources, to document 
spectfic cleaning methods and materials that meet toxicity, effectiveness, and materials 
compatibility requirements. The design of the RM is compatible with the use of vigorous cleaning 
methods because cntical installed equipment, such as sensors, lixits, lighting fixtures, etc., can be 
removed easily for cleaning and reinstalled afterward. 


After reassembly, the unit will be tested to verify complete functionality (such as heat 
transfer, atmosphere revitalization, and humidity control) of all components and subsystems. 

He EM, which was transfetred to the post-flight science facility, will be forwarded to a 
specialized refurbishment facility after the animals have been removed. EM equipment, including 

^ ’ nstrumentat ' on system, camera system, lixit lines, and lighting hatdware will remain with 
the EM, and will be removed and cleaned prior to functional testing. Any specialized 
instrumentanon belonging to a Principal Investigator (PI) will be removed and returned The EM 
w.U be cleaned and sterilized with approved, non-toxic residue cleaning materials, and procedures 
such as steam, since remaining materials are metallic and tolerant of moisture and high 
temperatures. After checkout and replacement of failed or fatigued elements, components will be 
reinstalled and the assembly subjected to end-to-end continuity and functionality checks. 


The ECLSS and EM will be installed in the SM housing, all connections continuity and 

pressure checked as appropriate, and delivered to the next user for installation and checkout of 
night-peculiar equipment 
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6.2.1.5 Ground Control Experiment Module (GCEM). The design of the RRS, as 
defined by the SAIC concept, allows the GCEM (Figure 6.2-1) to duplicate the flight vehicle- 
imposed environment on the experiment subjects exactly, except for variable gravity less than one 
Earth g. Rodents, plants, and other biological specimens will encounter the identical orientation, 
life support system, and instrumentation interface as those in flight. Though microgravity cannot 
be duplicated on earth, hyper-g can be provided by swinging the GCEM as a conical pendulum. 
To achieve one and one half g’s, for example, the conical half angle would be arc-cosine 1/1.5, or 
0.666, which is 48.2 degrees. The angular rate of rotation required for the artificial g would be 
determined, as it is in space, by the radius. 


• SAIC GCEM PROVIDES EXACT DUPLICATE OF FLIGHT SYSTEM 

- All Significant Accelerations in Same Direction 

- Identical Subsystems Used (ECLSS, Power. Lighting, Nutrients, Etc.) 


• VALIDATES FLIGHT DATA 
- With Bulit-ln Time Delay, 
Repeats In-Flight Events 


GROUND 

TEST 

MODULE 


VEHICLE EMULATOR 


• ALLOWS DETERMINATION 
OF EFFECTS OF SPACE 
ENVIRONMENT 
(RADIATION, G's) 


GROUND CONTROL EXPERIMENT MODULE 


• PROVIDES PRE-FLIGHT VERIFICATION OF PM 
COMPATIBILITY WITH EXPERIMENT 
SUBJECTS 

- Detects Toxicity, Test Subject Sensitivities 


• HANDLING, SUPPORT EQUIPMENT 
FUNCTIONALLY IDENTICAL TO FLIGHT PM 
EQUIPMENT 


TOR42E/04 


Figure 6.2-1. Ground Checkout and Experimentation Control 


6.2-5 







With the exception of using nonspace-qualified elements, the GCEM, as shown in Figure 
6.2-2, will be physically identical and functionally interchangeable with the flight RM. This will 
extend to the fabrication methods and materials used. They will be identical, in order to preclude 
exposure of plants or animals to unsuitable, toxic, or deleterious substances. This approach will 
enable the PI to duplicate all experiment specimen exposures. Tests run in the GCEM to verify the 
absence of such influences will constitute adequate verification of orbital systems' benign nature. 


EXISTING RESOURCE APPLICATION - NO NEW DEVELOPMENT 
COMBINED VEHICLE EMULATOR/GROUND TEST MODULE OPERATION 


VEHICLE EMULATOR 

MAIN MODULE WITHOUT 
HEAT SHIELD/RADIATOR 
CRUSHABLE NOSE 


ELECTRICALLY IDENTICAL TO 
FLIGHT VEHICLE 



GROUND TEST MODULE 

ANY FLIGHT TYPE MODULE 
CAN BE USED 

TRANSPARENT EXTERNAL 
VESSEL CAN BE USED FOR 
DIRECT OBSERVATION 


ALL INTERFACES IDENTICAL 
TO FLIGHT VEHICLE 

REALTIME DATA AND 
SOFTWARE ANALYSIS 


HEAT REJECTION VIA 
EXTERNAL RADIATOR AND 
GROUND SUPPORT AIR 
CONDITIONING 



WT PWR 

EMULATOR 500 
PAYLOAD 950 
SUPPORT 50 


CAPABLE OF PRECISELY SIMULATING 1G ON-ORBIT ENVIRONMENT 
PORTABILITY, CONFIGURATION PERMITS COMBINED RADIATION TESTS 


Figure 6.2-2. Ground Control Experiment Module 
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All expendables used by the RM, except solid food, are supplied from containers mounted 
in spacecraft volume outside the RM. Expendables are supplied without requiring access to the 

RM, when used as the GCEM. This enables the experimenters to preserve the isolation of the EM 
on the ground as it is isolated in orbit 

The GCEM will also support ground control tests timed for a specified time delay relative 
to the flight test. Flight data may be "piped" direcdy into the GCEM as received, or a review 
period incorporated. The instrumentation system in the GCEM will be functionally identical to that 
on board the spacecraft, and will accept and respond to downloaded command data received from 
the spacecraft to the extent that the ambient one g physical environment permits. 

6.2.2 Requirements 

The LifeSat RRS Level I Phase B Science and Technical Requirements Document 
(STRD), paragraph 3.0, states: 

--experiments will include a wide range of biological specimens including: cells, single 
cell organisms, tissues, organ cultures, small terrestrial and aquatic plants, and small 
terrestrial vertebrates and invertebrates." 

The specific requirements of this design effort were to provide a preliminary RM design 
and accommodate other specified GFE payloads. 

The design of the RM was driven primarily by the top-level requirement of housing 18 
rodents for a maximum duration of 60 days. The RM design objective was further driven by the 
desire to limit abnormal and disturbing effects of high gravity gradient and Coriolis forces on the 
experimental animals and materials. The ability to establish a large radius of rotation when applying 
artificial gravity to the EM became a basic design goal and is a unique feature of the S AIC concept. 
Reduction, by a factor of six, in the rate of rotation necessary to achieve the maximum artificial g 
of 1.5 can be achieved using the SAIC concept when compared to the original Ames Research 
Center configuration. SAIC was well aware of information available from the Russian BioSat 
program that flew a small radius centrifuge, and found that results were unsatisfactory due to high 
Coriolis forces effects on the experimental animals. 

Similarly, after considerable study of potential and planned uses of LifeSat, an internal 
(SAIC) design objective was established to ensure that all significant and sustained accelerations 
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would be applied in the same direction relative to the animal/experiment accommodations. This 
was desirable since it would: 

a. Create an experiment environment that could be exactly duplicated in the Ground 
Control Experiment Module (except for hyper-g levels). 

b. Significantly simplify design of accommodations. This results from the need for 
removal of debris from the same surface (consistent "floor" location), location of food 
and water dispensers, cameras, etc. 

c. Minimize disorientation of experimental animals by providing as normal an 
environment as possible in the artificial g environment 

d. Simplify later design and accommodation of biological and botanical specimens, 
instrumentation, and retention systems. 

The requirements used in the RM design were those defined in the RRS SRD and other 
NASA referenced documents such as "The Guide for the Care and Use of Laboratory Animals," 
U S. Department of Health and Human Services. A list of the principal requirements is provided 
below: 

a. Use off-the shelf technology, whenever possible. 

b . Design for 0.99 per cent probability of safe return of the experimental animals and 0.95 
per cent mission success. 

c . Provide cage space in accordance with the guidelines of U. S. Department of Health and 
Human Services. 

d. Provide housing that is maintained in a sanitary condition with provisions for 
evacuating debris, fecal matter, etc. over the duration of the flight. 

e. Limit noise level in the Experiment Module (EM) to tolerable levels, below the 85 dB 
limit recommended by the U.S. Department of Health and Human Services 
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f. Assume that the rodents will be 600-gm sized for the duration of the flight, and 
consumables provisions sized accordingly. (This is a conservative assumption since 
the consumable supplies should be ample because somewhat smaller animals must be 
flown at the beginning of the flight in order to achieve an average size over the time of 
flight of 600 gms). 

g. Assume that rodent cages will be removed, flushed, and sterilized with an appropriate 
disinfectant material after each use. The design of the cages and all installed and/or 
attached equipment is compatible with that process. 

The RM Flight Module shall be designed as a self-contained unit that provides a habitable 
environment to support rodents by using utility resources of the RRS vehicle. As a minimum, the 
RM will include rodent habitat cages; food; water; waste storage; contamination control; control of 
the atmosphere temperature, composition and relative humidity; mechanical, thermal, and electrical 
connections with the vehicle; data collection and storage; and experiment control. The RM is 
intended to be used to support several species of rodents, including rats, mice and hamsters. 

6.2.3 Trade Study Summary 

The objective of the Payload Module Trade Study was to define a RM configuration that 
would support 18 600-gm rodents for 60 days on orbit at selectable accelerations (artificial g) 
between zero and 1.5 g’s. In addition, the RM needed to accommodate alternate Experiment 
Modules, including the General Botany Module, European Botany Module, and the multiple mid- 
deck lockers-sized General Biology Module. Trade studies were performed to specifically meet 
each of the stated RM requirements in a manner that also allows the RRS to achieve the system 
requirements, including safety, reliability, economy, etc. 

More specifically, the study paid particular attention to: 

• Placement within the RRS. 

• Optimal RM size, shape, center of gravity, inertial properties. 

• RM mechanical mounting to facilitate assembly/access. 

• Appropriate degree of vibration/shock isolation. 

• Payload electrical power and thermal control requirements. 

• Placement of electrical power/thermal control connections. 

• Degree of thermal isolation during all phases of the mission. 
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• Appropriate command and data interface to the RRV. 

• Appropriate RM venting interface to space vacuum. 

The effectiveness of the approximately 15-meter radius achieved in the SAIC design was 
evaluated using data provided by Dr. Bryant Cramer in a paper entitled "Physical Considerations of 
Artificial Gravity" given in 1983. Although Dr Cramer's criteria indicate that an even longer radius 
would be desirable, radii in excess of 30 meters are not practical for a small satellite. Thus, the 
compromise radius of approximately 15 meters was adopted by SAIC as a design goal. At that 
radius, a modest motion sickness indication is predicted and the gravity gradient and Coriolis 
forces are hardly perceptible within the small confines of the rodent cages. Figure 6.2-3 depicts 
the relationships between rate of rotation, acceleration in g’s, Coriolis forces, and probability of 
motion sickness. Only the experiments to be conducted on the RRS can determine where these 
curves actually lie. Nevertheless, this plot depicts the best currently known criteria for arriving at 
the best compromise of radius and rotation rate, and was instrumental in SAICs design for RRS. 


• Spin Radius Reduces Coriolis Effects and Motion Sickness 

• Radius Chosen for Optimum Gain 

• Negative Effects Increase Rapidly as Radius Decreases 



108428/01 

Figure 6.2-3. SAIC Fractional Approach 
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b. Can accommodate up to 6 mid-deck lockers as requested in the RMOAD. (The original 
payload summary report erroneously indicated a larger vehicle would be required). 

c. Has the advantage of imposing all significant accelerations in the same direction relative 
to the animal cages or cuvettes through most phases of the flight. 
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Table 6.2-1. Payload Module Environments Comparison 
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Figure 6.2-4. Payload Module Comparison 
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EXPANSION 

VOLUME 



Figure 6.2-5. Variable Mid-Deck Locker Capacity 



Figure 


6.2-6. Payload Module Designed to Accommodate Other Science Payloads 
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As may be seen in the physical envelope drawing, the module contains its own 
environmental control system. Consequently, the volume normally occupied by the RM 
environmental control system will be vacant and may be used to house additional batteries. Since 
added mass will be required in this location to preserve the center of gravity required for stable 
reentry, there may be adequate power for the full 60-day flight. Detailed design of the 
accommodations in the PM await availability of additional information and tasking from NASA. 

6.2.3.3 European Space Agency (ESA) Botany Module (EBM). Information on the 
EBM was obtained from ESA Botany Module on LifeSat, given as a paper at the July, 1989 
LSSWG meeting. The configurations described appear in three versions: free fall only, internal 
centrifuge only, and a combination of free fall and on-board centrifuge. The centrifuge allows 
fractional gravity to be imposed on relatively small, and otherwise immobile, botanical specimens. 
The free fall exper im ent subjects are intended to be controls on the accelerated subjects, and 
scientists usually desire to have both control and experimental specimens exposed to exactly the 
came environment, except for acceleration. As may be expected, the combination version requires 
the highest power available which limits its flight duration. However, the SAIC RRS design 
allows over twice the 18-day flight duration expected for the European version. The value given 
for power required is 197 W and 187 kWh for a duration of 18 days, as depicted in Figure 6.2-4. 

6.2.4 Baseline Design 

The SAIC RM is designed to support 18 rodents for up to 60 days in conditions as close to 
the normal ground environment as possible, except for unique conditions applied by the Principal 
Investigator, such as fractional gravity forces and radiation. The cages have been sized to 
accommodate 600-gm rats, and provides separate specimen storage. Smaller rodent groups may 
be accommodated by installing revised modular cage assemblies within the current space when the 
specifics are known and requirements are established. 

Design trades for the RM were primarily concerned with the provision of an optimum in- 
flight environment while remaining within reasonable power, size, mass and accessibility limits. 


As shown in Figure 6.2-7, the Rodent Module consists of two separable modules. They 
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TOR42G/03 

Figure 6.2-7. Payload Module Scaling 

a. Experiment Module - Provides experiment space and resource interfaces as defined by 
the experiment Principal Investigator. As described in this document, it is designed for 
housing 18 rodents, but has been developed to allow maximum flexibility as well as 
interchangeability with other payload modules. 

b. Support Module - Provides environment support, power source, data collection and 
storage capabilities, and serves as interface between the spacecraft and the EM. The 
SM completely isolates the EM from any anomalies induced by the spacecraft. 
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The RM is housed in a cylinder 60-inches long, 34 inches in diameter at the access panel 
end, and stepped down to 30-inch diameter at the midpoint of the RM length. These dimensions 
allow adequate accommodation of the Rodent Module and the miscellaneous payloads discussed in 
later sections of this report. The basic configuration is shown in Figure 6.2-8. 
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Figure 6.2-8. RM Configuration 






6.2.4.1 Rodent Module Power. Ames Research Center completed a study that defined 
energy requirements based on the original requirement of 12 rodents for a 24-day mission. They 
determined that 12 rodents would require 30 Kilowatt-Hours (kWh) of energy. When coupled 
with 50% design margin requirement, total energy requirements for 12 rodents on a 24-day 
mission would be 45 kWh. With the subsequent increase to 18 rodents and a 60-day mission, a 
new energy baseline is established at 148 kWh. Figure 6.2-9 portrays the mission duration versus 
energy consumption relationship. 


• SRD: RRS MUST PROVIDE AT LEAST 45 KWH 

- Mission is 18 Rodents/24 Days 

• ARC STUDY: 12 RODENTS/24 DAY MISSION 
REQUIRES 30 KWH WITH LITTLE CONTINGENCY 


. NEW BASELINE -148 KWH 

. COMPARISONS: 

- ARC Power Analysis: Increase 50% 

(18 Rodents) + 5% Contingency - 90 + KWH 

- Pegasus Baseline Mission Profile Provides 
Additional Data Points 

- Comparing Pegasus Data to ARC 12/24 to 
Predict 18/60 - 95 KWH 



. 50% INCREASE IN RODENTS (12 -18) CORRESPONDS 
TO 50% ENERGY INCREASE (30 - 45 KWH) 

. ADDITIONAL INCREASE FROM 24 DAYS TO 60 DAYS 
MORE THAN DOUBLES RODENT DAYS AND 
THEREFORE ENERGY CONSUMPTION 


Figure 6.2-9. Baseline Energy Requirement 
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The electrical power requirements for the equipment selected in the above trades are listed 
in Table 6.2-2. This power budget was provided to the engineers performing the RRS Power 
System Trade Study. The RM power budget, along with the power requirements of the RRV, 
were used to size the overall RRS power system. Results of this analysis can be found in the 
RRS Power System Trade Study Summary Report 

Table 6.2-2. Power Budget for Payload Module 





1 30 kWhrs = Baseline 
90W = Average 

Item 

Power 

Periodicity 

Average 

Peak 

1 . 

Lights - GE 400 pg. 26 
28 VDC-0.10A 

54 

(3 W x 18) 

63% max. 

(15 out of 24 hrs. on) 

34 W 

54 W 

2. 

Air Revitalization Fan 

6 W 

100% 

6 W 

6 W 

3. 

Waste Removal Fans 

12 W 
(6 W x 2) 

1% 

0.12 W 

12 W 


Memory 

10 W 

100% 

10W 

10 W 


Video Recorder 

12 W 

2/1440 

0.14% 

0.017 W 

12 W 

5a. 

Camera 

4 W 

1% 

.04 W 

4 W 

6. 

Data Handling 

5 W 

100% 

29.6 W 

20 W 

7. 

Sensors 
Thermistor - 2 
Pressure -2 
Temp. - 4 
Quantity - 8 

5 W 

100% 

5 W 

5 W 

8. 

Implantable Telemetry 

18 W 

10% 

2 W 

2 W 

9. 

Activity Monitors 
Lixits - 18 
Food- 
Activity - 

4 W 

100% 

4 W 

4 W 

10. 

EM Command and Control 

5 W 

100% 

5 W 

5 W 

TOTAL POWER 



95.8 W 

134 W 


6.2.4.2 Rodent Module Size. Beginning with the space allocation per rodent and access 
requirements, it was determined that the Ames Research Center Phase A study cage layout was 
ideally suited for RRS application. The cages used in the SAIC RM design trade study are an 
adaptation of the cage design used in the Phase A study. This cage arrangement uses a three tier 
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circular platform with each cage occupying a 60-degree sector of the platform. This type of design 
provides the specified interior volume, height, and floor space needed by the rodents of up to 600- 
gm mass. The cage is anticipated to be fabricated out of corrosion resistant steel (CRS) for 
durability, ease of cleaning, and resistance to wear and rodent gnawing, as well as producing no 
toxic residues that may be harmful to experimental animals. A schematic of the rodent cage is 

shown in Figure 6.2-10. 


94 SQUARE INCH PRIMARY 
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FACTOR OF 100 
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EXHAUST MESH SIZED 
FOR SPECIMEN 
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S 20 FT/MIN FOR 15 AIR 
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10-15 CHANGES PER 
HOUR (NIH 85-23) 
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5 240 FT/MIN 


PURGE MANIFOLD 
PROVIDES POSITIVE FLOW 
FROM SUPPORT AREA 

9.5 INCH HEIGHT EXCEEDS 
7 INCH REQUIREMENT 


Figure 6.2-10. Cage Requirements 
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As shown in Figure 6.2-11, design of the cage assembly permits modification to 
accommodate smaller rodents in greater numbers on later flights because distribution systems for 
water, instrumentation, lighting, and atmosphere conditioning arc readily adaptable to an increase 
in the number of cages and occupants. The lixit system, for example, is redundant with the two 
supply lines separately manifolded to 18 consumption points. Adding more lixits will only require 
adding the necessary lines to the manifold and routing low pressure flex lines to the lixits in the 

revised cage array. 


food bar carousel 

- Removable for Large 
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• CAGE 
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Figure 6.2-11. Cage Features 
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Cage design for the rodent family units contemplated for later flights will necessitate 
provision of special housings in the cages for rodent pups to ensure tha, they are access, le bydie 
mother, bn. do no, drift apan in reduced gravity, as the pups must remain m touch to retain body 
heat Such cages will he installed in die same volume now specified for die current 18 cages, bm 
redesigned as described for the family units. The number tha, may be accommodated will be 
determined at the dme of the new cage design, and the new cages will be adapted to the cunen 
provided "lazy susan" cage arrangement. This will allow the same ventilation, l.ghtmg, 
instrumentation, etc. provisions to be used with only relatively minor routing and connection 

revisions. 

6 2 4 3 Rodent Module Mass. Consumable requirements for die RM were determined by 
multiplying die consumption rates for rodents, documented in die RRS SRD. by various vahresof 
rodent population and flight durations. The amounts of food, water, and gases estima ^ 

these calculations, including 50» design margin as required by the SRD, were used o 
the types and capacities of various continuers required to store these consumables. Estimates were 
also made of die various support requirements (ECLSS, lighting, cages, ere.) m order to arrive a 
se, paramedic curves which could be used to estimate RM mass as a function of number of rodents 

and mission duration. 

Dry mass estimates of consumable tankage were calculated for the 18 rodent case. , 
initial mass estimates vary only due to the increased number of rodents for die 6-, 12- an - 
rodent cases. Figure 6.2-12 shows die paramedics obtained from these calculations. As can be 
seen, the mass estimate for the RM, assuming an 18-rodent payload on a 60-day mission, is 

approximately 950 lbs. 

During design tradeoff studies accomplished during actual RM design efforts, the mass 
requirement was adjusted to reflect actual weigh, requirements. THese changes resulted m mass 
requirements being increased to 972 pounds. 

The 972-pound RM mass estimate for a full 18-rodent/60-day mission includes die mass of 
expendables and tanks located outside die RM, but connecred «, die RM by appropriate interfaces. 
As shown in Table 6.2-3, the Roden, Module contributes 652 pounds of mass consisting o 
pounds for die EM and 376 pounds for die SM. The remaining 320 pounds is allocmM 
support tanks and contents housed outside die RM. Specific mass breakdowns are detailed 

Table 6.2-4. 
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• Phase A Study Established Maximum Payload 
Mass of 530 Ubs but Did Not Specify Mtesion 
(Rodents/Days) Accommodated 

• ARC Study Required 450 Ubs for 
1 2 Rodent/24 Day Mission 

• SOW/SRD Did Not Specify Weight Limit 

• Payload Mass Has Fixed Component Based on 
Number of Rodents and Storage Capacity and is 
Variable Due to Consumables 

. Consumables Include Water, Oxygen, Air, Cage 
Mounted Food Bars and LiOH 

. Weight Estimates are Based on Vendor Inputs, 
Allied Signal Estimates, and Scaling From 
Previous Studies 

• Increase to Baseline 950 Lb Driven by 18 
Rodent/60 Day Mission Requirement 



Figure 6.2-12. Impact of Consumables on Rodent Module Weight 
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Table 6.2-3. 


• PAYLOAD WEIGHT INCLUDES 

EM 276 
SM 376 

652 INTERNAL 

EXTERNAL 
STORES 360 

972 TOTAL 


VEHICLE 


SUBSYSTEM 

WDGHT/LBS* 

EXTERNAL CONSUMABLES 


H,0 WITH STORAGE (H,0 . 130 LBS) 

159 

<X WITH STORAGE (O z - 49 LBS) 
AlR WITH STORAGE (AIR - 24 LBS) 

91 

45 

CONOENSATE STORAGE (TANK ONLY) 

25 

TOTAL 

320 LBS 


- Weights 


PAYLOAD MODULE 


SUBSYSTEM 

WEIGHT/LBS* 

EM 

RODENTS (600 GRAMS EACH) 

24 

FOOD (7 IBS* 18 CAGE) 

120 

CAGES (2 LBS PER CAGE) 

36 

SUPPORT (2 LBS PER CAGE) 

36 

FOOD/WATER CONTROL (1 LB PER CAGE) 

18 

LIGHTING (1 LB PER CAGE) 

18 

SENSORS 

18 

OTHER 

6 

TOTAL 

276 LBS 


SUBSYSTEM 

WEIGHT/LBS* 



SM 


PRESSURE VESSEL 

105 

FILTERS 

5 

LOH 

134 

FANS 

7 

HEAT EXCHANGER 

21 

VALVES 

14 

DATA MODULE 

20 

POWER CONTROL 

20 

CAMERAS 

10 

SUPPORT 

30 

OTHER 

10 


T0R42J>37 


TOTAL 


376 LBS 
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Table 6.2-4. Payload Mass and Power 


Component 


RM EXTERNALS 

Mass 

(lbs) 
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(lbs) 
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0.3 
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25 
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TOTAL 
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6.2.4.4 Rodent Module Accessibility. Access to the experiment (rodent cages) late in the 
pre-launch countdown, and as soon as possible after touchdown, is a primary scientific 
requirement. The RM is designed to support rapid access with a minimum of spacecraft 
disassembly. Access is through the aft portion of the RRV after removing the Recovery Parachute 
Container. The upper cover of the RM can be removed after disconnecting external power, 
instrumentation, and cooling lines, and releasing a single, circumferential clamp. Flexible lines 
inside the close-out allow it to be raised sufficiently to access the same lines internally, disconnect 
them from the close-out, and remove it. That will allow access to the EM hold-downs and the EM 
internal lines feeding the lixits, lighting, instrumentation, and cameras on individual cages. The 
entire EM assembly can then be lifted out of the RM, and either be removed entirely or raised 
sufficiently to permit access to any of the 18 individual cages. 

6.2.4.5 Rodent Module Interfaces. Rodent Module interfaces are specifically defined in 
RRS-IFS-101. 


6.2.4.6 Experiment Module. The EM (Figure 6.2-13) is designed to accommodate up to 18 
600 gm rodents in individual, and/or group cages, that can be installed and removed without any 
service connections. It is a separable module made up structurally by the 1 8-rodent cages and the 
three-layer support structure. The cages are mounted to permit their individual removal and 
replacement, but contribute to the rigidity of the EM structure when assembled in place. The basic 
configuration, which has the cages arranged in 3 decks of 6 cages each, can be easily reconfigured 
for 2 or 3 cages per level (Figure 6.2-14). 
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imuTY CORE 


Figure 6.2-13. EM Assembly 
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• NO CHANGE IN SUPPORT HARDWARE 

OFFSET SHAFT COMPATIBLE WITH BASIC SM CONFIGURATION 

• MONKEY CAGE USES ALL 3 DECKS FOR 3 <T HEIGHT REQUIREMENT 

GP-3 REQUIREMENT OF 4.3 SQUARE FEET CAN BE MET 


Figure 6.2-14. Potential Cage Configurations 


The cage support assembly consists of the central cylindrical duct (Figure 6.2- 15) and three 
circular dividers that separate the three cage layers. The dividers provide a floor between cage 
layers to act as a debris catchment and ventilation duct to channel air and debris into the central 
column for delivery to the debris trap and filters, particularly when the spacecraft is subjected to 
artificial gravity or is on Earth. Space is provided for the routing of supporting equipment, 
including the instrumentation lines, water supplies to the lixits, camera connections, lighting power 
lines, and the other expendables supply lines and connections between the SM and the RRV 
through the access panel. 
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, CAGES SLIDE INTO PRIMARY EM STRUCTURE 
- No Service Connections Required 



CAMERA, ILLUMINATION 
INSTRUMENTATION AREA 
EXTERNAL TO EACH CAGE 
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- Removable tor 
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HARNESS RUN 
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WASTE SHAFT AS PART OF 
REUSABLE WATER SERVICE 


Figure 6.2-15. Utility Core Detail 
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Each cage has a dedicated food carousel located inside a food service shaft that permits 
food replacement from the top of the EM. The food service shafts are designed to be removable so 
that the group cages can be inserted and removed in one piece. The single cage configuration 
would use a dual cage design, with the walls designed to be removable after cage installation but 
before food shaft installation. 

The offset debris shaft configuration, although compatible with the basic RM design, 
would require a different structural design. An alternative approach (Figure 6.2-16), also 
compatible with the basic RM design would be the use of 3 to 6 of the existing mid-deck locker 
design. In this design, a rack assembly would be used to hold the lockers within the EM volume 
in the SM, with an extension section added to the pressure vessel to accommodate the 4 to 6 locker 
configuration. No change to the RRV/RM interface is required to accommodate the RM extension. 
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EXPERIMENT 
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MAIN MODULE WITH PAYLOAD 
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EXPANSION 
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SERVICE MODULE 
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Figure 6.2-16. Variable Mid-Deck Locker Capacity 
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All services and instrumentation are installed on the basic structure. The water distribution 
service (Figure 6.2-15) is installed inside the waste shaft, and can be removed and replaced from 
the top of the structure. The instrumentation/power harness is mounted, external to the central 
shaft and behind close-out panels, to protect the harness from the potentially corrosive 
environment. The lighting and sensor heads (Figure 6.2-15) are mounted inside each cage 
compartment 

6.2.4.6.1 Waste Management. Three different systems were evaluated for ensuring 
removal of debris, fecal matter, and other adhesive materials from the cages. The use of 
intermittent scraping devices, a moving floor system, and the application of a hydrophobic coating 
material were examined. The mechanical complexities, and possibility of interfering with or 
injuring the test animals where mechanical devices were used, made use of the passive coating 
material the best solution. A hydrophobic agent approved for use in animal accommodations will 
be applied to the cages and other surfaces subject to debris and waste accumulation. Tests in the 
NASA KC-135 parabolic flight aircraft have shown this material to be an effective means of 
preventing waste adhesion to cage surfaces. The loose waste and debris will be entrained by the 
ventilation air and carried down the central column of the cage support structure to the waste 
collection filters. The filters are remoted from the cage area, and debris will be retained in the 
collection area by constant air flow. 

The RM will be designed to allow removal of all attached components (lighting fixtures, 
lixits, food bar dispensers, instrumentation, etc.) so that the primary structure (cages, support 
structure, attach fittings) may be sterilized by steam cleaning or other suitable methods. The 
stainless steel cages will be coated with a hydrophobic material to prevent fecal matter, hair, or 
other waste and debris from attaching to the cage structure. Normal airflow, augmented by 
occasional added puffs, will entrain the debris, carry it to the vertical central air duct, and further to 
the debris trap at its SM interface. Airflow will desiccate trapped material, and carry moisture to 
the condensing heat exchanger where it will be absorbed by the waste water system and stored. 
Dry residue will be contained and desiccated in the debris trap by constant airflow. 

The debris trap is designed to provide five separate traps, which will be swung into the 
airflow successively as the mission progresses; one in the center and four others which may be 
swung out, in turn, from the square side walls as they are needed. In the limit, all four will be 
swung back and the entire debris trap will collect debris. The debris traps have activated charcoal 
filters that remove trace materials, reduce odors, and ensure air freshening on each circuit through 
the ECLSS. 
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6.2.4.6.2 Food Dispensing System. Food bars will be displayed on rotary cylinders 
unted vertically at one outward comer of each cage. Initial consumption food bars will be 
mount* on one wall of the cage, with additional bars tequired to prov.de adequate food for a 600- 
gm rat for 60 days, mounted on the rotary cylinders to be indexed into teach towards the end of the 
ight, as the need is determined or in accordance with pre-flight programming. 

The use of paste food was investigated early in the study phase. Bionetics, who operate as 
a t e science support contractor for Ames Research Center stated that, in order to achieve the 
required consistency, the food must contain at least 60% water. As a result, water intake from 
lixits would be affected and would distort dietary information and animal metabolism data. The 
ture would also be very difficult to preserve and to protect from microbial, fungal, and mold 

infestation over a 60-day period because of its high water content. For these reasons. SAIC 
rejected the use of paste food for the RRS. 

Pellets were found to be difficult to distribute to the cages from a central repository. The 
mechanisms are bulky, complex, and subject to clogging. The pellets are quite hard, which may 
solve the potential problem of rodent tooth growth, but can result in fragments drifting into other 
equipment. Ad lib delivery of pellets to the cages is also mechanically complex. 

When compared to food bars, these two alternatives were considered far less satisfactory 

presented complex materials handling challenges, and offered few, if any, advantages. The 

statement at the recent LifeSat Science Working Group (LSSWG) meeting that the food bars 

created a debris problem is accepted, but does not appear be sufficient reason to eliminate 

possible use. Any debris created by the food bars will be earned down to the filters and 
immobilized. 


6.2.4 6.3 Water Dispensing System. Drinking water will be provided by a lixit system 
based upon the system used in the Shu, tie. The system will accept a range of potable water 
formulations, as desired for a given experiment. The water supply system is an adaptation of the 
system used in Space Shuttle rodent accommodations and is shown schematically in Figure 
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Figure 6.2-17. RAHF Drinking Water System 






A reliable water supply is ensured by placing two independently supplied lixits in each 
cage. There will be a capability for activating and deactivating individual lixits. The supply of 
water is sized as required for a population of 600-gm rats for 60 days. Because the rodents will 
have to begin smaller in order not to exceed 600 gms before returning, sizing is conservative. 

6.2.4.6.4 Mechanical 

As detailed in 6.2.4, the Experiment Module is one of two separable modules. The EM 
interfaces with, and receives all support from, the Support Module. 

6.2.4.6.5 Electrical. The cage illumination requirement in the SRD states: "During the 'light' 
part of every light/dark cycle, the spectrum of the illumination shall be the same as the spectrum of 
natural sunlight (the standard reference is sunlight at 12:00 hours at a mid-latitude on June 21st, 
Ref NASA Technical Memorandum 101077, Lighting Requirements in Microgravity - Rodents and 
Nonhuman Primates). During the "dark" part of every cycle, the spectrum of the illumination shall 
be TBD." Further clarification of the "natural sunlight" spectrum was found in NASA TM 
101077. Table 6.2-5 contains data extracted from TM 101077, and contains comparisons of the 
spectra of natural sunlight, fluorescent lighting and incandescent lighting, respectively. 

SAIC explored various alternatives designed to satisfy this requirement. Each alternative 
has inherent disadvantages, such as power consumption, size, etc. When the alternatives were 
presented by SAIC at the first quarterly review, we were verbally informed that the lighting 
spectrum was not as critical for animals as had been indicated in the RRS SRD; that the critical 
spectrum was for plants and will be provided by the European Botany Module. 

Given this direction, SAIC investigated the use of incandescent lamps similar to the ones 
used in the Research Animal Holding Facility (RAHF) and the Animal Enclosure Module (AEM). 
These are miniature aircraft lamps just over an inch long, requiring 28V and 0.17A, with a rated 
average life of 1,500 hours. Two lamps can be mounted in the roof of each cage to provide 
redundancy. 
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Table 6.2-5. Lighting 


REQUIREMENTS 

• SAME LIGHT/DARK CYCLE AND LIGHT INTENSITY IN ALL CAGES 

• PERIODICITY : "LIGHT' AND "DARK" PORTIONS SELECTABLE WITH MAXIMUM 
DURATION OF CYCLE EQUAL TO 30 HOURS 

• "LIGHT" INTENSITY: 40 LUX ± 35 LUX (16.4 pW/cm 2 ), LESS THAN ± 10% VARIATION 
DURING MISSION 

• "LIGHT" SPECTRUM: SPECTRUM OF NATURAL SUNLIGHT, REFERENCE 12:00 
HOURS AT A MIDDLE LATITUDE ON JUNE 21 

• "DARK" INTENSITY: LESS THAN 0.2 pW/cm 2 


REFERENCES 

Rodent Animal Holding Facility (RAHF) - Uses Small Incandescent Light Sources in Each Cage 
Animal Enclosure Module (AEM) - Uses Small Incandescent Light Sources in Each Cage (GE 

313, 1820) 

Ames Workshop - Specifies Natural Sunlight Spectrum and No Point Sources 


SYSTEM DESIGN 

• 40 LUX (0. 125 m 2 ) CAGE AREA CONVERTS TO 200-300 LUMENS 

• POWER REQUIREMENT IF CAGES ARE ALL OPEN IS LESS THAN 10W 

• CAGE LAYOUT REDUCES EFFICIENCY, REQUIRES MORE SOURCES 

• POSSIBLE CENTRAL LIGHT SOURCE WITH FIBER OPTIC DISTRIBUTION TO CAGES 


FAVORED CONCEPT 

• INDIVIDUAL INCANDESCENT LAMPS — TWO PER CAGE 


Another alternative studied was halogen lamps. These lamps have a color temperature of 
3200K, which corresponds to standard daylight on a slightly overcast day. However, halogen 
lamps generate significant heat, and require special heat dissipating fixtures. They present a 
thermal management problem to the spacecraft and mounting difficulties if rodent exposure to the 
hot fixtures is to be avoided. 


As a result of these investigations, SAIC is specifying use of standard aircraft type 
incandescent lamps for the RRS. These light fixtures will produce diffused light at a uniform 
level. The wiring will be detachable to permit ready removal of the fixtures from the cages and 
removal of the cages themselves. The modular design will permit rapid adaptation to other payload 
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configurations. The recommended incandescent lights will remain within specified intensity level, 
± 10%, when illuminated, for the required 60-day flight 

Two independent incandescent light fixtures will be provided for each cage. They will be 
mounted on the upper cage grill, with adequate space between the cage and the light housing to 
preclude rodent contact. The mounting will allow quick disconnect of the light fixture for 
replacement, cage removal, and post-flight sanitation. The lighting cycle will be regulated by on- 
board timing controls that respond to the experiment control software. The nominal lighting cycle 
will be programmed pre-launch, but may be altered in flight, if necessary. 

6.2.4.7 Support Module. The SM provides environmental support and spacecraft interfaces 
for the Experiment Module. As shown in Figure 6.2-18, it is a totally modular system that 
supports all aspects of EM survival. 
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Figure 6.2-18. Fully Integrated Support Module 
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The RM outer structure is a pressure vessel (Figure 6.2-19) that contains the controlled 
atmosphere of the installed EM. Expendables are delivered to the ECLSS subsystem through lines 
and quick disconnects routed through the access panel at the Recovery Parachute Module end of 
the RM. The ECLSS is housed in the cylindrical volume nearest the nose of the reentry heat 
shield, and may be removed and separated from the EM after both are withdrawn from the RM. 
The closely packed subsystem elements of the ECLSS, ducting, supply lines, and supporting 
structure, form a single integrated module which is self-supporting within the RM. Its location is 
keyed to push-home pins in the interior of the RM and further retained at the EM/SM interface with 
fasteners accessible through the access panel opening in the RM. 
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Figure 6.2-19. Pressure Vessel (With EM Access Cover Removed) 
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6.2.4.7.1 Electrical. The RM will receive all electrical power from the spacecraft power bus. 
Any unique power requirements will be satisfied via a power converter that converts spacecraft 
power to discrete voltages. 

6.2.4.7.2 Data Management. Data management design trades applied the principle of 
maximum on-board autonomy in order to minimize ground support/control activities. It is our 
intent to maximize system self-sufficiency while providing ground control input/modification 
capabilities. 

The full flight program will be loaded into the on-board database and initiated upon 
direction from the ground. On-board instrumentation will chronologically record conditions 
experienced by the rodents, including habitat atmospheric pressure, temperature, humidity, 
illumination cycle (also controlled on-board in accordance with pre-flight plans), lixit use, and 
specific animal instrumentation such as implants and acceleration. Video images (still pictures) will 
be recorded via videotape memory. A separate mass memory will record other instrumentation 
readings. When directed, selected images and/or data will be downloaded when the spacecraft is in 
range of ground tracking stations. In case of special need, the Telemetry and Data Relay Satellite 
System (TDRSS) can be used as a link to maintain contact anywhere in orbit 

Normally, the ground station will only transmit to the RRS if a change in flight plan is 
needed. However, the data management system will accept ground command transmissions to 
reprogram the on-board sequence, if necessary. Conditions experienced on-board will be reported 
to the ground station for imposition on the GCEM after a planned time interval, so that the 
experimental animals on the ground will act as controls on the flight animals to ensure that any 
differences in response of the animals can be attributed to the specific conditions peculiar to space. 

Requirements for data to be obtained from the RM (and GCEM) are described in the SRD. 
The requirements are restated below within brackets [ ] as they will apply to the DASS design 
described by Krug. Additional information is provided as rationale. 

a. [Data is required to be "time tagged" to permit accurate reconstruction of the history of 
the mission. Data from each mission (launch) shall also be identified using words or 
bits that are unique to the RM and mission.] 
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Each source of data will have a unique identifier, such that each cage, instrument, 
camera or environmental sensor is positively identified The DASS design will provide 
for time-tagging of all data. 

b. [The RM shall record module status, module environment, experiment housekeeping, 
and experiment status parameters and measurements at regular intervals during a flight.] 

Module status and environmental data will be accessible and recorded at intervals 
consistent with the mission phase and module status. Alarm/waming signals will be 
transmitted in event of malfunction of principal life support systems. 


c. [Implanted sensor measurements will require receiving antennae and demodulation 
equipment for biotelemetry.] 

Surgically implanted sensor/transmitters are recommended as the best method of 
obtaining long term physiological data from caged, but otherwise unrestrained, 
unattended animals. 

Based on the planned mission schedule of three or more missions per year, the system 
must be easily reconfigurable and able to accept data from many types of biomedical (and 
bioscience) instrumentation, be rugged and not susceptible to "single point" failure, and be readily 
serviceable using commercially-available parts. Based on the planned 10-year life of the RRS 
vehicle, the system must be reliable and able to be updated easily to accept new developments in 
data transmission, storage, and display. Versatility of data acquisition and storage system 
equipment should permit its use in studies of space life science topics in addition to rodent studies, 
such as plant and single-cell organism behavior, to obtain maximum benefit from the RRS 
program. Even with these characteristics, a system designed to acquire and store data from space 
life science experiments that are as yet unidentified and unspecified requires a data acquisition and 
storage system that is highly modular. 

The need for ground-based control of spacecraft functions as a backup to preprogrammed 
operation, establishes the basis for defining system housekeeping instrumentation. The RM 
subsystems requiring remote backup control, and consequent monitoring instrumentation, include 
the ECLSS, the water supply (lixits and their supply and distribution system), and power. 
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Monitoring will include airflow, temperature, humidity, pressure, pressure drop across the 
air filter system (to monitor debris build-up), heat exchanger coolant inlet temperature, quantities 
remaining in the consumables supply system, total RM power consumption and, possibly, discrete 
power consumption by selected components, such as fans, for troubleshooting. Key local 
temperature readings can also be useful, for example, in selected cages and fan motors. These 
readings will be available upon interrogation by ground control, individually or in pre-determined 
sets, as the need arises. The readings may or may not be recorded permanently for post-flight 
analysis, depending upon data storage capacity and degree of maturity of the RRS, but the data 
necessary for real-time RM system control will be formatted, compressed, and ready for immediate 
downloading on demand. 

The system may be programmed to retain selected data permanently, and to purge data that 
has been downloaded after ground control confirms proper receipt or if not requested within a 
certain time frame. 

Additional information generated by spacecraft systems, but affecting the RM experiments, 
i.e., system g's and/or attainment and maintenance of preprogrammed g level, will also be 
available to ground controllers and subject to explicit control, either by altering the on-board 
program, or by direct command intervention from the ground. In addition, preparation for changes 
in system operating conditions, such as a major change in g level or reconfiguration in preparation 
for reentry and recovery, will be implemented by preprogrammed commands monitored, in real 
time, from the ground, and subject to direct or program alteration override. 

6.2.4.7.3 Data Acquisition and Storage System (DASS). The RRS System 
Requirements Document, Section 4.0, "Requirements for Rodent Module," was reviewed to derive 
basic concepts. The DASS design for the RM will acquire, preprocess, transmit, and store data. 
Capability for remote control of data acquisition and experiment protocols will also be provided. 
The RRS Data Handling Subsystem (DHS) will be a separate system with a data and command 
link to the DASS; the data handling processor will be a separate processor for satellite system and 
environment control. 

Analyses conducted by SAIC and Krug International have defined the expected 
instrumentation needs of the RM, as a design condition for the EM. Experiments will be 
monitored using on-board biomedical instrumentation. Automated data acquisition and storage on- 
board is required, and is planned to be the primary experiment data record. 
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The instrumentation system, a direct adaptation of the system being developed for Space 
Station Freedom, will use hardware and software developed for the Medical Information Bus 
(MIB) system. The overall DASS schematic is shown in Figure 6.2-20. 

Selected data will be recorded for post-flight analysis. In addition, the bulk of the video 
imaging will be recorded for post-flight use. Selected video still (single frame) images may be 
selected and downlinked via telemetry during flight at designated times during the mission. 

Because the SAIC GCEM design is identical to the equivalent flight hardware, the same 
instrumentation system will be installed. Control data from the GCEM will be immediately 
accessible for evaluation, and for comparison with flight data as it becomes available. 
Physiological data (temperature, heart rate, representative ECG, and blood pressure, including 
waveform samples) from a radio telemetry system will be sampled at 1-hour intervals. 
Environmental variables will be obtained from the RRS DHS and will be measured by sensors 
used for environmental monitoring and control. 

The Data Processor (DP), the "brain" of the DASS, will function to process incoming 
commands, query the Cage Processors) (CP) for data from biomedical instrumentation, query the 
Image Processor (IP) for image data, and send all data to mass storage. Redundant biomedical 
instrumentation connections will be installed, and will access duplicate processors, with ability to 
switch to the backup processor in event of a failure. 

Commands from a ground control station will access the Configuration Database (CD). 
The CD will contain preprogrammed query intervals for biomedical variables, image acquisition, 
and mass storage recall; the CD will also contain switch/control parameters for biomedical 
instrumentation. Limiting ground control station access to the CD only, will protect the DASS or 
biomedical instrumentation from inadvertent or unintended commands. A command from a ground 
control station can modify the CD in one of three ways: 

a. Modify the preprogrammed recording interval for biomedical instrumentation or image 
system, 

b. Modify the mass storage query interval, or 

c. Modify a biomedical instrumentation switch/control parameter. 
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Figure 6.2-20. Rodent Module Instrumentation 

















Each CP will be associated with biomedical instrumentation for a particular cage. The CP 
will receive data from the associated instrumentation, preprocess that data (e.g., time-tag), and 
store data locally in CP memory. At preprogrammed intervals, the DP will query the CP for 
specific biomedical data from instrumentation located at the cage. The capability to remotely switch 
power on or off to biomedical instrumentation will be provided. 

The DP will also have the ability to query mass storage for stored biomedical data and 
images. After storage, the DP will have the ability to retrieve data and images for telemetry to a 

ground control station. 

6.2.4.7.4 Video Imaging. Image acquisition will be provided from the video camera 
systems. An image processor will convert video images, taken at one frame per cage per hour 
using a 256 x 256 x 4 format, to digital format, compress image data (dependent upon final design 
and operational storage requirements), and transmit labeled frame data to mass storage. Recall of 
images from mass storage will be possible on ground or preprogrammed DP command. System 
design options will provide either random access from mass storage or temporary image buffer 
with video tape storage; the latter will preclude image recall from mass (video tape) storage. 

Video images will be recorded at intervals designated before launch and controlled by the 
instrumentation system, with each cage being observed in sequence. Individual (still frame) 
images will be coded for later identification. If required, specific cages may be designated for real- 
time or near real-time observation and direct telemetry of images to a ground receiver. The 
frequency and cage sequence of imaging may also be remotely controlled. 

The video camera system selected, the SONY model XC-77/DIT RH-100 remote sensor 
black and white camera (Figure 6.2-21), is compatible with the instrumentation system designed 
by Krug International, and provides the lowest volume, mass, and power consumption of the 
systems reviewed by SAIC. The remoting capability of the charge-coupled device imaging system 
allows individual placement at each rodent cage, routing the image signals to a multiplexer, and 
then to the single camera unit for conversion and delivery to either the mass memory device or the 
telemetry system for direct transmission to the ground. Simultaneous recording and transmission 
of designated frames will also be possible. 
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• DITECH DIT RH-100 REMOTE SENSOR 
SOLID STATE CCD CAMERA 

18 SELECTABLE SENSORS 

COSMICAR MODEL C20612 FIXED 
FOCUS, MANUAL IRIS LENS 

244 LINE HOR/VER RESOLUTION 

• 32.774 BYTES/IMAGE 

262 KBYTES DATA 

5 BITS CAGE IDENTIFICATION 

24 BITS TIME (1 SEC RESOLUTION) 

3 BITS IMAGE REQUIREMENT SOURCE 
16 BIT PREVIOUS ACTIVITY COUNTER 



Figure 6.2-21. RRS Video Surveillance 

6.2.4.7.4.1 DASS Hardware Description. The DASS design offers on-board hardware 
redundancy by using two mass storage units: one for biomedical data from instrumentation and one 
for images. The ability to switch between either mass storage device, in event of one device 
failure, is planned. The DASS will operate independendy of the DHS, so that if the link to the 
DHS is disabled, the DASS will continue to function with the most recent (or default) program 
commands. 

The preferred computer components will have STD BUS configuration. Circuit boards 
with STD BUS format are available from many suppliers; a variety of computer components and 
data acquisition modules are offered. A computer system to meet unique needs can be built from 
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commercial components with minimal design and development. Specific DASS hardware (Figure 
6.2-20) is described below: 

a. Data Processor (DP) - The DP will be a processor board with general purpose Intel 16- 
bit processor. One such processor is the Ziatech STD DOS V50 MS-DOS (Ziatech 
Corporation). MS-DOS is the preferred operating system for this board, because many 
existing industry standard device drivers are available, e.g., optical disk drive interface. 
The DP processor board will be installed in a STD BUS chassis and connected to each 
of 18-cage processors. 

b. Cage Processor (CP) - The processor board for each CP will be similar to an Intel 
80196 board used by Krug International for previous shuttle flight experiments. 
Circuits are included for cage sensor or biomedical instrumentation signal conditioning. 

c. DP-CP Interface - High speed communication links are planned, but design has not 
been finalized. Two options exist: All CPs can be installed into the same chassis with 
the master DP to permit data communication by Direct Memory Access (DMA), or each 
CP can be located at a cage with connection to the DP via synchronous communication 
link similar to Krug’s MIB design. The first option requires no additional 
communications hardware, because data is transferred over the STD BUS. The second 
option simplifies cable requirements, but will require additional hardware. Final 
determination will be made during the final design effort. 

d. Image Processor - The IP will be used to convert standard video-to-digital data. The 
configuration under consideration consists of an RLC Enterprise TMS-320C25 signal 
processor with interface to a Computer Dynamics VIDEO STORE video digitizer. 
Efficient image compression will be provided, and final determination will be made 
during the final design effort. 

e. DP-BP Interface - The DP will command and access image data via the image processor. 
Due to the large amounts of data associated with images, the IP will be installed in the 
same chassis as the master DP to use high speed image transfer via Direct Memory 
Access (DMA). 


f . Mass Storage - Biomedical data from instrumentation will be stored using a Winchester 
disk drive. Read, write, and random access functions will provide data downlink 
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capability on command. Total accumulated environmental and physiological data will 
be approximately 200 MB. For photo images, accumulated image data will be 
approximately 500 MB. 

g. DP-MP Interface - The Small Computer Systems Interface (SCSI) format will be the 
preferred interface for the DP and MS. Winchester and optical disk drives (controllers) 
are available with SCSI interface format and SCSI interface cards are available for the 
STD BUS chassis. 

h. Video Camera -The camera selected is the SONY model XC-77/DIT RH-100 remote 
sensor, black and white camera, which provides a 570 line high resolution image. The 
camera body measures 4.4 x 2.9 x 10.7 cm, and the remote imager is approximately 3 
x 2.9 x 3 cm. 

6.2.4.7.4.2 DASS Software Description. Each software component of the RM, 
including the IP, DP, and each CP, will contain a command interpreter and command sequencer. 
The command interpreter resident in the DP will receive and respond to requests from the DHS to 
send or receive data. The command interpreter resident in each processor will be slaved to the DP. 
The command sequencer resident in both the CP and DP will be driven by three tables of 
information: event, time, and action tables. The event table will contain a list of commands and 
conditions required to execute them. The time table will contain programmed event schedules. 
The action table will contain single commands and multiple command sequences. 

To communicate RM commands from the DHS (or ground control station) and to 
communicate with biomedical instruments, the DASS will use a Device Data Language (DDL) 
similar to the Medical Device Data Language. This language will permit CPs and instrumentation 
devices to be queried and data reported as single point values or as formatted groups. The DDL 
will also permit event, time, and action tables to be modified. Address capability of the language 
will make it sufficiently flexible to address components, system parameters, biomedical variables 
or image parameters within each processor. To use the DDL, the CPs and image processor will 
maintain a table of system and variable information, including permanent identifiers, configurable 
identifiers (to address definable groups), and calculated identifiers (for event triggers). 

To support ground system operations, complete descriptions of biomedical instrumentation 
for each mission will be created. This information will be used to generate software tables and the 
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parameter identification code tables for the RM and GCEM. A flexible configuration system will 
be provided to support rapid refurbishing and reconfiguration of the RM. 

6.2.4.7 .5 ECLSS. The purpose of any spacecraft ECLSS subsystem is to provide an 
environment in which the life form (man, rodent, plant, etc.) can survive and function over the 
course of the mission. ECLSS requirements listed in the RRS SRD, coupled with the derived 
consumable requirements and waste calculations, bounded the capabilities the ECLSS needed to 
provide. A summary of these requirements is given in Table 6.2-6 for an 18-rodent 60-day 
mission. 


Table 6.2-6. Environmental Control/Life Support System 

• Functions: Controls Temperature, Humidity, Air Composition and Air Pressure 

• Requirements: 


Environmental 

Materiab for 60 Days 

Pressure: 14.0-14.9 psia 
Composition: 20 ±2% O 2 
Temperature: 65-79°F ±3.6°F 
Relative Humidity: 55 ±15% 

CO 2 Partial Pressure: 7.6 mmHg Max 

Water Consumption: 133 lbs 
O 2 Consumption: 48.6 lbs 
Feces Produced: 47.6 lbs 
Urine Produced: 52.8 lbs 
CO 2 Produced: 66.6 lbs 


The ECLSS has been designed to meet system needs with a low risk design that is simple, 
reliable, and flexible in accommodating varying life science payloads, and has low initial and 
refurbishment costs. To accomplish these goals, the system makes extensive use of modular 
design and passive control, using experience and components derived from manned space 
programs. These features are consistent with the requirement for minimum electrical power 
consumption, which was a primary consideration in design of the ECLSS. Examples of system 
simplification through use of passive control techniques include: 

a. Passive atmosphere composition control (using pressure regulating flow control valves 
to replenish gas use or loss from the RM) eliminates need for an O 2 partial pressure 

sensor and an active control. 

b. Passive compartment temperature control using a manually adjusted heat exchanger 
bypass valve for trimming the cooling capacity eliminates need for an active temperature 
control and sensors. 
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c. Passive thermal control during reentry and recovery using a fusible wax heat sink 
contained in the heat exchanger eliminates need for operating the cooling loop and an 
evaporative heat sink for this condition. 

d. Passive phase separator in the heat exchanger using capillary wicking for condensate 
removal eliminates need for electric motor-driven rotating water separator and its power 
consumption. 

6.2.4.7.5.1 Atmosphere. The first ECLSS design trade was between active or passive C0 2 
removal systems. Four types of systems were investigated in this trade: 1) Regenerable C0 2 
removal/water dump system, 2) Regenerable C0 2 removal/water save system, 3) Electrochemical 

filtering system, and 4) Lithium hydroxide (LiOH) system. 

The regenerable C0 2 removal/water dump system was the lowest in weight and power 
consumption but would require gas and water venting that would result in a contamination 
problem. Ice formation on the Astromasts could cause a retraction problem and affect system 
safety. The regenerable C0 2 removal/water save system would vent only gas, but has a relatively 
high power requirement. The electrochemical filtering system also has a fairly high power 
requirement and is unproven technology. The LiOH system uses relatively low power, but has the 
highest total weight of all systems. These features are briefly summarized in Table 6.2-7. 


Table 6.2-7. Alternative Carbon Dioxide Removal Methods 



Advantage 

Disadvantage 

• Regenerable CO2 Removal/ 
Water Dump System 

Lightest Weight 

Low Power Consumption 

Requires Gas and Water 
Venting 

• Regenerable CO2 Removal/ 
Water Save System 

Vents Only Gas 
Modest Weight 

High Power Consumption 

• Electro-Chemical Filtering 

Modest Weight 

Unless Vented, Uses 
Same Power as the 
Regenerable System 
Unproven Technology 

• LiOH CO2 Removal 
Recommended System 

Uses Less Power 

Highest Total Weight 


It was determined that an LiOH system would best meet RRS unique mission needs. The 
design selected is based on a design by Allied SignaVAiResearch, and is derived from the system 
being developed for the manned Assured Crew Return Vehicle (ACRV). Use of the ACRV design 
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concept and components will ensure that the RM will be able to use high reliability man-rated 
hardware and systems. The passive control system (depicted in Figure 6.2-22) also allows 
significant simplification of control hardware and reduces failure modes, complexity, and cost of 
the system. 

Initial air and oxygen supplied from consumables containers in the RRV will be free of all 
specified contaminants. The spacecraft atmosphere will be filtered through a two-layer filter as it 
cycles through the ECLSS. A particulate filter, for removal of solid matter, and an activated 
carbon/chemical filter, for trace contaminant control, will be utilized. Filter changes, four times 
during each mission, will be accomplished by rotating the frame out of the airflow path, and 
swinging another frame into place. Five filter frames form five sides of a cubical box placed at the 
exit of the central ventilation column in the EM. Each of the sides will be rotated into place in turn 
until airflow restriction indicates filter saturation, or 12 days of the 60-day flight have passed. 
Then, the filter will be swung down and the next swung into place. 

The ECLSS will provide continuous airflow across the cages radially inward from the 
periphery to the central column, and then vertically from the first layer of cages (at the RM access 
panel) to the debris trap/filter assembly at the ECLSS end of the central column. Airflow continues 
through the filter to the fans, then to the LiOH canisters, to the heat exchanger, and then into the 
plenum allowing flow up the outside of the experiment module and back through the cages. 

Atmospheric pressure in the EM will be maintained by a two-gas system, using oxygen and 
air (oxygen and nitrogen at 21%-to-79% ratio) supplied from tanks in the RRV. The ECLSS 
system will sense loss of metabolic oxygen as a pressure reduction and supply oxygen whenever 
system pressure drops below 14.7 psia +/- 0.2 psia. A flow-limiting orifice in the oxygen line will 
allow air to flow in to supplement oxygen flow whenever pressure drops below 14.4 +/- 0.2 psia. 
Replacement rate of the EM atmosphere is determined by the expected metabolic consumption rate 
and by a calibrated overboard dump. The overboard dump ensures replacement of the air in the 
experiment volume by the air and oxygen in the tanks at a rate which prevents buildup of 
undesirable trace gases. 

6.2.4.7.S.2 Thermal Control. The thermal control subsystem of the ECLSS must be able 
to mitigate internal heat loads, generated by the rodent and internal electronics, and relay the heat to 
the RRV thermal control system for overall thermal control. 
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Figure 6.2-22. RRS Passive Environmental Control 














Since the water evaporation provides useful cooling in the animal compartment ventilating 
air loop, waste dehydration appears as a latent heat load for design of the heat exchanger and a 
negative sensible heat load for the sensible heat balance. 

The thermal control system is designed to control internal temperatures sensed by the 
experiment subjects in all flight regimes through use of an active condensing heat exchanger. The 
heat exchanger is a stainless steel air-to-liquid plate-fin design incorporating wicks between the air 
side fins for removal of condensate. The wicks are manifolded to a porous plate gas barrier. The 
condensate is conducted, at a slight (12-in water) negative pressure, to the condensate storage tank. 

The heat exchanger incorporates an additional set of plate-fin sandwiches which contain a 
fusible wax (n-tetradecane) to serve as the heat sink for reentry and recovery of the animal pod, as 
well as for initial launch and orbital deployment. During normal operation, cooling will be 
provided by an external cooling loop using the spacecraft space radiator as the heat sink. Since the 
fusible wax heat sink will have a fusion temperature (41.9 degrees for the selected wax) above the 
normal cooling loop operating temperature (such as 35 degrees F), it will be maintained in a frozen 
condition. For a 3-hour reentry and recovery period, the coolant loop will not be available, and 
cooling will be provided by melting the thermal storage wax. During this period, the condensate 
collection system will not be operative, and the 0.4 pound of condensate which is formed will 
collect in the heat exchanger manifold. 

The heat exchanger will have core dimensions of 8.0 inches by 8.0 inches by 8.0 inches, 
and will weigh 21 pounds, including 9 pounds of thermal material. The heat exchanger is sized to 
provide 50 degrees F saturated outlet air for inlet conditions of 65 degrees F, 75% relative 
humidity, and 10 ft^/min airflow. 

After isolation on the launch pad, the cooling source for the heat exchanger will be 
provided through a ground support umbilical to the spacecraft thermal control system, which will 
then supply cooling to the ECLSS in the SM. In flight, after deployment of the spacecraft into its 
extended configuration, the on-board radiator will dissipate thermal buildup and deliver coolant to 
the ECLSS heat exchanger in the SM. 

6.2.4.7.6 Mechanical 

6.2.4.7.6.1 Noise. Sound levels experienced within the EM will be controlled by providing 
insulation, as required by launch vehicle imposed environments. The SAIC design of the RM 
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places the experimental animals inside a multi-layered spacecraft structure that will provide a 
significant degree of inherent sound insulation. In addition, all moving elements that could 
produce annoying noise, or mechanical vibrations, are installed in the SM, and are separated from 
the EM by a bulkhead. The SM contains only one set of rapidly moving parts that could be a 
source of significant vibration - ventilation fans. They will be very precisely balanced, and are 
very small and light in mass. All fluid transfer is via gas pressure and diaphragm so that the RM 
assembly will be inherently quiet during orbital operations. 

6.2.4.7,6.2 Reliability. The design of the ECLSS system for the RRS was adapted from a 
design developed for manned spacecraft. Parallel redundancy has been incorporated for all 
dynamic components such as fans, valves, regulators etc. Valves specifically incorporate dual 
control elements packaged in integrated assemblies. 

6.2.5 RRV Support 

The RM receives command and control, electrical, mechanical, thermal and consumable 
storage support from the RRV. 

6.2.5.1 Command and Control. The SAIC design provides the capability for pre- 
programming the command sequencer before launch in order to control all pre-determinable 
spacecraft and system functions. However, the telemetry system will include command 
capabilities to intervene, re-program, and/or alter spacecraft functions, as needed, either in real time 
or by uploading a timed sequence of events to be controlled and implemented by the command 
sequencer. The command sequencer will accept programming or telemetry uploads to adjust RM 
event sequencing and initiation to the actual spacecraft schedule. It should also be noted that 
because the SAIC designed GCEM is functionally identical to and oriented and operated similarly 
to the RM, it can respond to the same experiment-related commands as the RM. 

6.2.5.2 Electrical. The RRV provides vehicle bus power, nominal +28 volts, to the RM. The 
RM uses a power converter to satisfy any unique discrete voltage requirements that may be levied 
by the EM. 

6. 2.5.3 Mechanical. The SM must fit within a dynamic envelope 60 inches long with upper 
and lower diameters of 38.0 and 32.5 inches respectively and have a dry weight not exceeding 
approximately 380 pounds. 
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6.2.S.4 Thermal. The RRV houses the active thermal control devices, and pumps cooling 
liquid to the RM thermal subsystem. 


6.2.5.S Consumables. The RRV provides tank storage for water, air, and oxygen 
consumables. 
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6.3 Structures Subsystem 

6.3.1 Operation 

The structural subsystem functional operation is divided into three major phases for an 
RRV flight. 

6.3.1. 1 Prelaunch and Launch. The structural subsystem provides support and shock 
isolation to the payload during the launch phase of the mission. 

6.3.1.2 Orbital Flight. Once orbital flight is achieved and the RRV is separated from the 
launch vehicle, the commands for initial separation of the two vehicle halves (bolt operation) are 
given from either ground command or internal clock. Vehicle extension, as well as retraction, is 
computer controlled. The control function involves synchronization of the mast deployment nuts. 
These in synch determine the deployment rate of the deployed module. Anomalous behavior 
causes stoppage of maneuver and signal to ground for further instructions. 

6.3. 1.3 Reentry and Recovery. Final latch position check is telemetered to ground and must 
be verified before reentry maneuvers can be performed. Impact with the ground will be cushioned 
by a crushable structure in the sphere cone. 

6.3.2 Requirements 

The structural subsystem purpose, as outlined in Table 6.3-1, is to provide the overall 
vehicle configuration for the RRV. The structural design of the RRV supports the payload and 
RRV subsystems throughout all phases of the RRS mission. The requirements for the structural 
elements were broken down into the five most stressing cases, dependent on the element being 
sized. 

a. Prelaunch and Launch - An assumed Delta launch gave a worst case loading to the RRV 
of 5.5 g axial (along Z RRV axis) combined with 2.2 g in the XY vehicle plane. The 
vehicle mass is assumed to be 5000 pounds. 

b. Orbital - Assumes an artificial gravity mission of 1.5 g and vehicle extended to 100 foot 
length. The vehicle mass is assumed to be 5000 pounds. 

c. Reentry - 15 g axially deceleration forces along with maximum external aerodynamic 
pressure of 3000 lbs /ft 3 . The vehicle mass is assumed to be 4400 pounds. 

d. Terminal Reentry - 6 g axially from parachute opening shock. Main module mass is 
assumed at 2700 pounds. 

e. Touchdown - Deceleration of 10 g axially upon earth impact with a vehicle mass of 
4200 pounds. 
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Table 6.3-1. Structure Subsystem 



the purpose of this subsystem is to 


• PROVIDE SUPPORT AND MOUNTING FOR ALL SUBSYSTEMS 

• PROVIDE PAYLOAD SHOCK ISOLATION 

• provide mounting points for launch vehicle adaptor 

• PROVIDE FOR EXTENSION/RETRACnON OF TWO VEHICLE HALVES 

LOADS 

— PROVIDE QUICK ACCESS TO PAYLOAD AND/OR EXPERIMENT MODULE 


masu) ,o yield a 40 Wsdo- 

des,gn should be reusable to whatever extent possible. finally the structural 


S ys.e ms ?„vZweir^rrf7ri d r s T n and aii8 " mem ** ,he propuisi °" ^ 

pad, , cool It,: S “ — — - 

6.3.3 Trade Study Summary 

shape ot“ttr,ar“ * -he 

deployable tri-mast, and the scalability taT” 16 W “ hm ‘ ha ‘ Shape • the use of the 

t=,= .»*ssr 
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Tel a Tn W ' rc yZ6d ta “ mK 0fr “ nffy f0ras (relattd “ and aeredynamic stability 

(relative L" ,h “ ° f PreSSUre ***« *« ** center of gntvi,y 

H, " “ aer ° S,abili, >' while s "" ^ing low enough ,o preclude thermal 

problems (whtch would require a heavier heat shield) andCor excessive deceleration loads. 

Given the body shape and the use of the tri-mast, the question became one of prooer 
component placement This emailed balancing the vehicle to maintain reentry stability HpnTd 
maxinuze the spin radius of the main module. The basic stirdy conceded thatpZZ 
pmpu ston system as far aft as possible was the most feasible, since the mass on the Deployed 
Module increases die spin radius. This placemen, is no, a detriment „ reentry stability because^ 
pope llan, is burned off prior atmospheric entry. The vehicle elecuonics were placed on the 
towes, posstble station on die Deployed Module to minimize detrimental effect on reentiy s^bility 
The other subsystems, such as Power and ECLSS, were placed based on support of other 
subsystems. This basic configuration was then scaled for logical Roden, Module design points 

rzzzr ^ ™ ge - m ^ <*» «> « l::z 


6.3.4 Baseline Design 

and s , Th '7T‘ d f g " deSCriP,i0n ° f U ’' RRV “ Separattd imo >■“ representative modules 
and submodules that make up die RRV design. The sections covered are: 

Deployed Module (DM) consisting of the conttol and propulsion submodules 

Maui Module (MM) consisting of the nose, conical heat shield, and carrier submodules 
Payload module attachment fittings 
Astromasts 
Astromast analyses 
Launch vehicle to RRV attachment. 

RRV has anT ^Vi ^ 6 ' 3 " 2 Sh ° W the RRV m the launche d or retracted configuration. The 
RRV has an overall lengdi of 116 inches with a 95-inch diameter. The RRV structural design 

berng modular namre, provides for easy access to all components and subsystems. This is 

especially , mportam ami was done intentionally to minimize manufacture/refurbish schedule time 

For refurbishment, each major module can be replaced, or units on die module, once die vehicle is 

disassembled, with minimal impact on other subsystems. Standani refurbishment after a flight 

would include replacing die nose and conical heat shield submodules, inspection of all high stress 
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areas, replacement of any damaged members, and removing and replacing the Astromasts. The 

masts would be sent to the manufacturer for checkout, and refurbishment as required, before being 
approved for reflight. 


Design Assumptions. The vehicle structure is constructed of 6061-T6 aluminum. The 
6061 is a high strength, corrosion resistant material with good weldability and machining 
characteristics. Material properties are listed in Table 6.3-2. 

Table 6.3-2. RRV Structural Design Assumptions 

• ULTIMATE FACTOR OF SAFETY (UFS) = 1.5 

• BASELINE MATERIAL IS 6061-T6AL (HIGH STRENGTH 
CORROSION RESISTANCE, WELDABILITY) 

• PROPERTIES 

- Density: 0.098 lb/in 3 

- Elastic Modulus: 10.9 mpsi 

- Ultimate Tensile Strength: 42 kpsi 

- Yield Strength: 36 kpsi 

- Thermal Coefficient of Expansion: 13.0 x lO'ty’F 


The worst case loadings described above, and a 1.5:1 ultimate factor of safety (no yield) 
based on these loads, was assumed in the performance of the structural sizing analysis. 


6.3.4.1 Deployed Module. The Deployed Module is divided into two sections: the 
Propulsion Submodule and the Controls Submodule. 


6.3.4.1.1 Propulsion Submodule. The Propulsion Submodule shown in Figure 6.3-3 (top 
view) and Figure 6.3-4 (3D view) is the primary load carrying structure when in the launched 
configuration. It consists of three main beams, three secondary beams, three interconnect beams, 
three shear web caps, three launch vehicle interface blocks, and single ring support. 

a. The three primary support beams are 3-inch in diameter, 3-inch thick, 0.15-inch 
muminum. Tne beams are sized for the worst case loads that occur when the vehicle is 
tully loaded during launch. Each beam weighs approximately 10.8 pounds. The 
beams have drilled holes with keenserts for installation of the propellant tanks, 
interconnection to the shear web caps and launch vehicle interface blocks. The main 
beams also provide connection points between the MM and the DM during launch. 
Additional keenserts on the top face provide for installation of the main maneuver or 
de-orbit thrusters. 
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INTERFACE BLOCKS 


Figure 6.3-3. Propulsion Submodule Structure 
Top View 



Figure 6.3-4. Propulsion Submodule (3D View) 
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secondary bSns^eTct P 0 * 015 for the Astromasts The 

artificial gravity mission Th*. ^[nasts loads when the vehicle is 

aluminum. Each S weighs a^Sty’1.6 ^SL^* O.OT5-tch 

C ' MlSSSS 1 bCamS " ° f ‘ he ** as the secondary beams and weigh 

d ' Sy^ 

1* outer nng interface. The *“*“ » > - a! 

e- The launch vehicle (LV) interfere hi^u 

^SSSSS^^EESS 

and inches square. Each block weighs approxS^u^s "* 1 U incheS Ion S 

f ' 

panels. The worst case loadf a P SUpp0rt for Ae Main and Aft Sj Z 

approx^yT^S* b °* *“ 

vehicle guidance. navig^Tnd SURX>m e,ectronics the 

subsystems. The equipment suppon panels consist 7' ^ Command l and power 

1.0-inch thick with 0.025-inch cells The ho a comc aluminum honeycomb structure 

structure provides for mounting of the elecmanhs^embhes 8 Thi^^^ C * 1 “* 

reentiy loads. Local copper straps are used t • * ™ re ,s sized b V worst case 

transmit heat away ftom the operating systems TheT^ ‘b'™ 3 ' CO " ducrivi 'y. as required, to 

a " d “a -he,, weighs approai” Z js'ZT ^ ^ **** 
senes of support tubes and the Astromast canisters. shelf is supported by a 

- rrs-'trrr"" 

canister and the main beam. The ZZ.ZT ? 7 '“ ^ *' A ~ 
configuration for the Control Submodule is shovnWn^ I^rat6 T^^td 3 ^ 3 ^ 108 — * 
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Figure 6.3-5. DM Command Submodule 



Figure 6.3-6. Command Submodule Dimensions (Inches) 




The final major componenl of the Controls Submodule is the shear webs. The webs react 
out loads during launch, and provide support for the Main Solar Array. The shear panels also 
serve as the primary structure for latching the DM and MM together prior to reenuy The webs 
provide the load path for holding the MM to the DM upon chute deployment. The shear webs are 
. -inch thick. The total mass for the shear webs, end caps, and latching system is 30 pounds. 

6.34.1.3 Deployed Module Integration. The submodules are manufactured along parallel 
paths. The two submodules are first checked upon construction, and then sent to different 
locations for subsystem integration. The Control Submodule includes the batteries, computers 
power electronics, GNC, and TT&C subsystems, as well as mounting provisions for the 
stromasts. The Propulsion Submodule contains the propulsion tanks and lines installed, 
tnc u g the main valving. The Propulsion Submodule has its own harness, which is installed at 
is time. Upon completion of the subsystem integration, the submodules are integrated into a 
completed Deployed Module as shown in Figure 6.3-7. 



Figure 6.3-7. DM Prior to MM Mating and AFT Solar Array Installation 


The Deployed Module has top closeout and inner closeout panels that seal the module and 
provide additional stiffness. The closeout panels are 0.5-inch thick aluminum honeycomb with 
0.10-inch endplates and 0.25-inch cell size. The final view, shown in Figure 6.3-8, depicts the 
prelaunch configuration of the Deployed Module. The Aft Solar Array, Astromasts, and all 



Figure 6.3-8. Deployed Module 

6.3.4.2 Main Module. The Main Module is also configured such that parallel manufacturing 

paths exist for the submodules. There are three submodules: the nose, conical heat shield, and the 
carrier submodules. 

6.3.4.2.1 Nose Submodule. The Nose Submodule consists of an aluminum monocoque 
nose. The nose structure is covered with high density ESM (50 lbs/ft 3 for reentry thermal protec- 
tion). The nose submodule is structurally sized based on the maximum reentry aerodynamic load 
of 3000 lbs/ft 3 . The monocoque nose is 0.050-inch thick with stiffening channels 0.25-inch thick 
in three places that attach to the support ring frame/longeron interface, as shown in Figure 6.3-9. 
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Figure 6.3-9. Nose Submodule 


The nose structure weighs 1 3 pounds including stiffening frames. 


The submodule contains one of two impact attenuation systems For „„ mi „ . • • 

returning to White Sanrfs an ♦ A y ems ' nominal missions 

s, an Impact Attenuation System is in stall ti. * 

aluminum honeycomb blocks inserted with the cells parallel to the vehicle z22u C ° nSiS ' S * 

*e honeycomb crashes a, a connolled rate, titus decelerating the vehi^m 2 20 7 t'T' 

velocity to zero and delivering less than 10 g deceleration to ti* vehicle me „ * 

of 15 pounds of aluminum and phenolic honeycomb, ranging in densira^LTTlTTf * ' 0,a ' 

per cubic foot. This provides deceleration from vertical !s well as 12 ,2^ 

dnft. -n* honeycomb installation is shown in Figure 6 3-io ““ ^ * 



Figure 6.3- 10. Impact Attenuation System Installation 
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T** RRV is also capable of water landings. The Nose Submodule is then equipped with a 

floutnon collar to stabilize the vehicle in the water and cushion th. landing shl The bade 
iguration and operation of the inflation collar is shown in Figure 6.3- 1 1 

The assembly of the Nose Submodule is similar to the land version, but the mounting bolts 
are replaced w.th shear bolts that allow the submodule to fall away This is accomnlished h 
partial inflation of the flotation collar located in the nose cavity i„ place of tire honeycomb This 
occms after mam chute deployment. Following initial inflation, the collar rolls out of the nose 

Inflati C<>mmUeS infl “ in8 ' ^ ° f “ — »y -e slipstream JT 

Z b f * * ankS - - RRV - bag contains vent 

P s for connolled gas release upon water impact. This cushions impact shock to an estimated 

6 lT:^Zo t g ^ ^ VeMCle “ - water, is shown in Figure 

o.^ u, with the 3D view shown in Figure 6.3-13. 

«.3.4.2.2 Conical Heat Shield Submodule. The conical heat shield consists of an 
aluminum honeycomb substitute and a 1-inch low density (36 lbs/f,3) ES M coating for reentry 

(g e ™ :~ M ^ a,Un T h0neyCOmb Stn,cn,re iS “ i" triangular sections 
(gtnesX and the ESM ,s sprayed on prior to bolting or riveting together. The joints between the 

The beat shield substrate is sized by the worst case aerodynamic loads of 3000 lbs/ftS The 
honeycomb structure consists of 0.25-inch cells with 0.030-inch thick face sheets. Interface with 
die earner module is performed in high density areas of honeycomb as shown in Figure 6 3-1 

r el — 7 C0 ” b 5Ubara “ “ a st riT insulative suppon structure for l ESM heat 
shield matenal, and weighs 93.3 pounds. 


Located under the ESM are coolant tubes for the MM thermal control radiator The 

honeycomb dimensions are shown in Figure 6 3-16 and • , • 

Figure 6 3-17 8 ’ d “ th rce-dimensional view is shown i 


in 


MM 7 Ubm0<,Ule Camcr Submodule is die primtuy stiuemre for the RRV 

:i?n:rr e “ suppon for ^ ^ - — . - - 

7 k SySttmS fOT the MM> and in,erfac “ *» Asuomasts and DM. The 

~ ~ ° f S “ lo "*— “1 ^ear panels, along with a series of 
stiffening frames and crossconnecs. The longerons are 2-inch wide, 1-inch deep rectangular 
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Figure 6.3-11. Water Landing Opti 



Figure 6.3-13. RRV - Water Landing Rotation Collar Inflated 
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GORE SECTIONS 
HEAT SHIELD 
SUB MODULE 


JOINT 



Figure 6.3-16. Honeycomb Heat Shield Substrate Dimensions 



Figure 6.3-17. Substrate 3D View 
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the vehicle together during ground o^LsI^ZIrill^e to " Pl ° SiVe ^ '**' hM 
stiffening frames and shear panels The i„ ™ lon * erons ““efface with the 

6 mia snear panels. The longerons weigh a total of 47 9 nonnH* tv, i 

interface on the lower half with six shear nan^ic a j pounds. The longerons 

nn six s near panels and end cap assemblies Fimm.o io , 

longeron and shear panels and Fieurefi^ 10 m u . * gure 6.3-18 shows the 

” ’ d hlgure 6 - 3 ' 19 ^ ves the shear panel dimensions. 

The two smaller shear panels are the MM interface for the Astromasts These ■ ee 
reacting out the MM vehicle toads when spun up,ol5g TT, eva reO oT h h 
shear pane, reacts on, toe parachute opening toads to toe ^ 0 ^“^ T 

are 0.80" toick and contain provisions along toe top to accent L nu ° 6 8- These panels 

combined shear panels and cap assembly weighs 20 pounds. mechanism. The 

longero^tsZn^i 10 ^!^” 1 ’' 1 ' 8 “* ^ ‘ 06e,her by a «*“ »f stiffening frames and 

ftame designed differently is theTp TanTwTich "s^M Wa " S ' ° n ‘ 

construction aro toe interconnect frames located a, toe bottom of toT ^ 

tarn top and side views shown in Figures 6.3-2, and 6.3-22 rosily 
«-3.4.3 Main Module Integration Fimire 6 3 as . 

with toe conical Heat Shield SuhmoH , x! ^ ^ Camer sm,cture fit-checked 

tankage ' " * *“"* a "« ^CLSS 

diameter of toe Payload Module support”^ Th ev l0Cated around Ihe outs,de 

Power control electronics Astromasr cahl ri e mount to two sets of support rings. 

dam handling, and the MM IMU are located on 
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Figure 6.3-1 8 . Main Module B 


asic Structure 



Figure 6.3-19. 


Shear Panel Dimensions 
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Figure 6.3-23. Carrier Structure With Heat Shield 
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igure o i- 26. Main Module With Cover Installed 

or other abusive environment factors after landing The cover is a h™* k 
Wck with 0.25-inch ccUs. I, coma, ns toe raised sections 10 25 „che T StrUCtUre 
■all. that fit to holes in the Deployed Module. The hot, ’ f “ diame ‘ erand4 
from the DM to the MM. CS pr ° Vlde for 11)6 Astrom asts to connect 


Final Integration of the MM consists 
onto the carrier structure. 


of installation of the completed heat shield 


assemblies 


6.3.4.4 Astromasts. The Astromasts 
large spin radius for the payload during 
are listed in Table 6.3-3. 


are incorporated into the SAIC RRV design to provide a 
arnfteial gravity missions. The Asttomast characteristics 
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Table 6.3-3. Astromast Characteristics 

ONCERON AND BATTEN - fiberglass 
DIAMETER: 10 INCHES 

DEPLOYMENT MECHANISM: internal nut CANISTER p, 

OUTSIDE CAJS0STER nSTER ~ RJLL DEPLOYED 


DEPLOYMENT RATE: 


0-3 TO 8.0 INCHES/SEC 


STRUCTURAL: 

: 7 1 x 106 Ib-in2 

- Bending Moment 63 ft-lb 

- Compression 290 °i Jongeron ) 

W1 ,b t 96 - 7 lb per longeron 


LENGTH STOWED: 48" 
LENGTH DEPLOYED: 1200 


masts provide a maximum extension of 1 Ton • . 
variety of space programs. However, .hey have never bee' ,, f AS,TOm “ ,S have t**" “*<1 
large masses. never •><*" for separating and Acting 


used on a 
two 


T d “ ign ' Oration of foe Asm 
following analyses have been performed to clarif •* mk elenKn ‘ of RRV. Therefore, tf 
in the RR V design. * ,ssues “««iaied with implementing foe masl 

a. Determine feasibility of concept 
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3^“,on™T^ CUNH0WW ™ n can be safely ■ 

37 lb/lb of Spinup Thrust 
* 96.7 lb Allowable 

BENDING LOADING 
256 in-lb/lb of Spinup Thrust 

- 760 in-lb Allowable 

OFSAFET? USTER SEES ^ T0 1,35 LB MA1NT AIN A FACTOR OF 2 MARGIN 

- Negligee Side Loading on Experiment from Spinup (<Q.i g ) 


results "T Perf ° rmed indepCndently by Astro Aerospace and SAIC to verify the 

results. The results are shown in Figures 6.3-27 and 6.3-28. 

be less 2 To 3 ' 5 '? Sh r d J’ a1, 2 ' 1M S<, “ are WaVC P “ ,Se ’ ' b ' re,a “ve deformation would 
and wo u h CS addlllon ' the structure w »“ld have a fundamental frequency of 0.4 Hz 

However, it is conservative. $ n °‘ rcPreSen ‘ * “"gallon. 

Dynamic analyses were performed on the given deployed RRV in order predict o„-orb„ 
aneuvertng loads in the Astiomasts. A finite element model was constntcted assuming two point 
asses for the mam and deployed modules connected by flexible elements that represent the 

773' 7“ A T maS ' S WWe m0d ' led indiVklUaUy and ded 10 *• modules fixed in all 

degrees of freedom. Each mast was modeled with 12 interstitial nodes. The model mass 

properties, stiffness properties, and geometry are given in Table 6.3-3. 

The finite element analyses included a notmal modes run with and without the geometric 

caj“til7fr 5 T ,IifU8a, ^ d “ ‘° ' he ^ mMCUV "' p/i mp ulse static loads 

rlr ? “ m ° dUle (WOrStCaSe,and tad- mlief methods, 

control thruster sine, and transient analyses. 

. .. Th ^"° mi ^ 1X10(168 analyS1S Sh ° WS that 1116 first mode is torsional at 0.087 Hz, with the first 

bendtng mode a, 0.77 Hz and the firs, axial mode a, 3.54 Hz with densely populated higher oZ 

bendtng mode. The effect of geomenic stiffening incased Ute mrsion mode by 49.4% to 
0. 13 Hz and the first bending mode by 20.8% to 0.93 Hz. 
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Static analyses were run in order to calculate the Astromast loads due to the thruster firings 
for both the spinup and rotisserie conditions. A maximum dynamic magnification factor of 2 is 
included in all loads to account for initial overshoot. The spinup and rotisserie maneuvers were 
analyzed for various combinations of thruster configurations with both cantilevered and inertial 
relief methods. The cantilevered analysis is overly conservative and implies that all thruster force 
is transmitted into strain energy. The cantilevered results show positive margin (relative to given 
loads capabilities) for spinup with two 0.5-pound thrusters and rotisserie with two or four 
0.5-pound thrusters or a spin rotisserie combination with two 0.5-pound thrusters. The maximum 
relative deflection is 15 inches and the maximum relative twist angle is 14 degrees. 


The inertial relief analysis is the actual loading environment where the thruster force is 
transmitted to accelerating the structure as well as strain energy. Results show high margins for all 
cases analyzed. The maximum relative deflection and thrust angle are 0.15 inches and eight 
degrees respectively. These results indicate that growth exists for the spinup thrusters from 0.5 to 
5 pounds, but due to large twist angles the rotisserie thrusters should remain at 0.5 pound. 

A sine analysis was performed to analyze the effect of a single 0.5-pound tangential control 
thruster. The sine analysis was run applying a 0.5-pound peak sine force from 0.05 to 40 Hz 
using a given damping valve of 0.2% critical damping. The results show high loads (negative 
margins) at the fundamental vehicle torsinal mode (0.087 - 0.13 Hz). However, above this 
frequency range the loads drop considerably and the minimum margin is greater than 6.3 for a 
firing frequency above 8 Hz. 

A transient control thruster analysis was run assuming one thruster with a 0.5-pound 
tangential peak force. An ideal square wave shape was assumed with an 8 Hz frequency. The 
cntical damping used was 0.2% and the duration of the analysis was 10 seconds which is nearly 

twice the half cycle (time of peak loads) of the lowest mode. All loads and relative displacements 
were small. 


Another transient analysis simulating the spinup maneuver was performed assuming two 
5-pound tangential spinup thrusters. The impulse was applied at t=l second. The pulse duration 
was 610 seconds and the total analysis duration was 630 seconds, again 0.2% critical damping 
was assumed. All loads and relative displacements were small. The axial load due to centrifugal 

force must be added to the mast internal loading. The spinup time is estimated to be 560 seconds 
to achieve 1.5 g. 
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Equally important as the determination of the Astromast’s feasibility was looking at design 
changes to the standard masts that would eliminate any single point failure in the retraction system. 
In addition, the SAIC concept requires power and data transmission between the two vehicle 
halves. These two requirements provided answers to each other. The RRV mast configuration 
changes are depicted in Table 6.3-5. 

Table 6.3-5. Astromast Design 

BASIC 

• NUT DEPLOYED ASTROMAST 10" DIAMETER 

• DUAL BRUSHLESS DC MOTOR DRIVES NUT 

CHANGES/ADDITIONS 

• CABLE RETRACTION MECHANISM IN MAIN MODULE 

• CABLE SYSTEM IN DEPLOYED MODULE 

• DUAL BEARING ASSEMBLIES ON NUT AND CANISTER 

• DUAL STRUNG NUTS ON MAST 

• CARBON FIBER HOUSING 

• MOTOR SYNCHRONIZING SYSTEM (6 MOTORS) 


The basic Astromast design used by the RRV is the nut deployed 10-inch mast. This 
design has the masts rigid upon extension from the nut. This allows for any length masts to be 
deployed, thus giving the experimenter increased flexibility. The current design incorporates dual 
brushless DC motors to drive the extension/retraction nut. To ensure that a nut or canister failure 
would not affect the mission, dual bearing assemblies on these two critical items are specified. The 
major change to the existing nut deployer is the incorporation of a lanyard system in the Main 
Module, as shown in Figure 6.3-29. 

The lanyard system provides two functions. First, the BeCu cable is used for 3-phase 
20 kHz power transmission between the two modules. In addition, in the event of a nut deployer 
failure to retract a mast, the cable reel is capable of acting as a cable mast retractor, retracting the 
masts into the cavity between the MM shear web and the top of the mast canister in the Deployed 
Module. 

6.3.4.S RRV Integration. RRV integration joins the MM and DM with the Astromasts and 
then with the explosive bolt connectors. This gives the vehicle the configuration shown in Figures 
6.3-1 and 6.3-2. For prelaunch activities and integration of the Payload Module, the Aft Solar 
Array and main propulsion thrusters thrust chambers would be removed for easy access and to 
prevent damage. These would be reinstalled just prior to launch after installation of the Payload 
Module. 
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Figure 6.3-29. Astromast Schematic 

«.3.4.« Rodent or Payload Module Interface. The Rodent Module interfaces are defined 

by rhe smicrure of the Roden, Module and the requirements of the science experimenters. Figure 

6.3-30 ts an exploded view of die Rodent Module (RM) canister and the main module longeron 
and shear webs. 


In terms of structural integration, the RM consists of three basic pieces. The pressure 
vessel, or payload module in Figure 6.3-30, the top cover, and the payload support brackets The 
pressure vessel ,s a cylmdrical sectioned device. The lower portion contains the payload ECLSS 
and data handltng subsystems for the RM. THe upper half contains the experimental subjects and 
on , he external surface, has connections for power, data, water, oxygen, air and thermal control 
fluid. The top of the vessel has a dual O-ring inside the bolt panem to ensure positive sealing. Tbe 
pressure vessel integrates into the MM structure via six teflon V-guides that correspond to six V- 
gu.de protrusions from the side of die pressure vessel wall. These promotions are located on the 
lower segment of the pressure vessel. The payload support bracket location is shown in Figures 
.3-31 and 6.3-32 from top and side views respectively. Hie top view shows the location of the 
alignment holes. The Payload Module has a matching set of studs to fit the holes. 
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Figure 6.3-30. RM Installation - Exploded View 
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Figure 6.3-3 1. Payload Attachment 






o 



Figure 6.3-32. Payload ICD Mechanical Top View 
The Payload attach fittings are shown in Figure 6.3-33. 

The fittings incotporate a "floating ,, construction, where the payload interfaces on one side 
and the vehicle on the other of an elastomer compound. The elastomer compound provides shock 
and vibration isolation to the payload. The bolts that secure the Payload Module attach from the 
top flange of the module, as shown in Figure 6.3-30, to the support fittings. After installation of 
the Payload Module, the top hat can be installed. An alternate design, instead of using the 30 
bolts, is to use a single marmon clamp installation. This would lower the time required to get into 
the payload, but at the cost of sealing effectiveness. The final installation operations are the 
connection of the fluid and power connections as shown in Figures 6.3-34, 6.3-35 and 6.3-36. 
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Figure 6.3-35. Fluid and Power Connection Location 

Liquid fluid connections are MOOG quick disconnects. These offer multiple seals to 
prevent leakage, and have the lowest spillage of any disconnect available. The power and data 
plugs use standard pin type connectors. The gas connections are dual soft seal flanged type. 

6.3.4.7 Launch Vehicle Interface. The launch vehicle interface was designed to work 
within the overall RRS concept This entailed being able to access the payload at T-4 hours before 
launch, and launching with the nose down such that the floor of the experiment was the same for 
all major phases of the mission. 
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Figure 6.3-36. Fluid and Power Connection Access Top View 

Two concepts were reviewed for integrating with the Delta launch vehicle. Tie first was 

incorporating the Ananespace Spelda. The spelda is a carbon filament wound tube and aluminum 

structure that suppons two payloads. The spelda has provisions for mounting two vehicles on 

Standard interface nngs. The upper spelda would be used to "hang" an RRV from this position 

The lower spelda platform would not be used. This concept uses flight proven hardware but 

would not fi t. with sufficient rattle space, in die Delta 10 foot fairing. This concept is an option for 

die Adas vehicle, however, which has up to a 14-foot fairing diameter. For launch of two RRVs 

two speldas would be mated together so that each RRV would hang from the upper satellite 
support fitting. 


Tbe integration concept chosen for the Delta incorporates a second interstage structure. The 
present Delta interstage is an aluminum monocoque structure 15.5 feet long and 95.4 inches in 
lamemr. It weighs 1035 pounds, including the separation system. The interstage separates the 
Mra first and second stages during flight. The integration concept entails using an 1 1 foot section 
o e interstage attached to the second stage at the bottom, and to the RRV spacecraft attach fitting 
at the top. This is depicted in Figure 6.3-37. 
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Figure 6.3-37. Launch Vehicle Installation Single Spacecraft 


Figure 6.3-38 shows the spacecraft attach fitting, along with the primary interfaces with the 
RRV. The interface structure is an aluminum stiffening ring at the bottom, with three tube truss 
members that extend to the vehicle interface, and an interface ring. The stack-up of the pieces is 
shown in cross section in Figure 6.3-38 


The nose fairing is a standard 9.5-foot Delta fairing with the cylindrical sections removed. 
The fairing interfaces into the new interstage section in the same manner as the standard Delta. 
This concept has the Launch Vehicle Adaptor (LVA) fitting as the only new piece. The vehicle 
position in the Delta allows for easy access to the Payload Module with the Delta nose removed. 
Details of the vehicle, LVA, interstage, and fairing interface are shown in Figure 6.3-39. 

The RRV sits on three point connections as shown in Figure 6.3-40 and 6.3-41. 

Figure 6.3-40 provides detail of the RRV’s interface area. The launch vehicle attach ring is 
made up of carbon phenolic sections. These sections are integrated into the main support beams 
described earlier. The 0.375-inch lip provides approximately 13 square inches of surface. This, 
coupled with the carbon phenolic compressive strength of 5000 psi, supports the RRV during 
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Figure 6.3-39. Delta Launch Vehicle Mechanical Interface Single RRS Launch 
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Figure 6.3-40. Launch Vehicle Interface (RVV) 
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Figure 6.3-41. Detail View RRV Launch Vehicle Interface Area 
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launch with greater than 2:1 safety factor. This view also shows the explosive bolt location for 
separation of the MM and DM after launch vehicle separation. Launch vehicle separation is 
performed by releasing a marmon clamp that holds the three interface areas against the RRV. After 
release, a gas bag is inflated in the base of the Delta second stage, as shown in Figure 6.3-42, to 
gently push the RRV away from the Delta. 


LAUNCH VEHICLE 
ATTACH FITTING 



UNINFLATED BAG 


Figure 6.3-42. RRV Deployment From Delta Launch Vehicle 

This deployment process is also conceptually useful as part of an Emergency Recovery 
Process (ERP). The ERP, conceived as a means of de-weighting the less than 0.99 probability of 
booster flight success sufficiently to achieve the required (SRD) 0.99 probability of safe specimen 
recovery, would be initiated by the thrust termination signal. The signal would initiate both the 
RRS/LVA separation process (Marmon clamp release, deployment bag inflation) and the RRV 
ERP. Although the gas bag force would be insufficient to eject the RRS from the LVA, the 
inflated bag would provide a cushion around the vehicle that would assist freeing the RRS 
following the destruct signal initiated segmenting of the LVA (and nose cone fairing if not 
previously released). The GNC would then, following a short delay for debris separation, use 
IMU data to initiate recovery by appropriately deploying the drogue chute. 

The Launch Vehicle Adaptor design is also capable of handling a dual launch as shown in 
Figure 6.3-43. 
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Figure 6.3-43. Dual-Launch System 

The dual launch requires development of a 65-inch new long interstage section. This 
section flares out to 1 14 inches in diameter and then flares back to the standard interstage 95.4-inch 
diameter. The new interstage can be built using existing Delta fairing tooling. The new interstage 
design uses the same diameter and angled sections as the 9.5 foot fairing. The rest of the launched 
concept is the same as the single RRV launch. 
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6.3.4.8 Vehicle Mass Properties 


a. 


5* : “ teg rated vehicle mass properties are given in Table 6.3-6. The margins shown 
are determined on a unit level and are passed on to the total vehicle. Thif table also 
calculates the empty center of gravity for determination of reentry stability The 
presently designed RRV, with the RM, has greater than 10% stability^ through M-2 5 
at which time the supersonic drogue chute deploys. y g 

matelv 6 ^ 7 no?mrff exte n ded ^ ehicl £ mass P ro Perties. The mass assumes approxi- 
m£vl°s P d f pr ° pellant havc consumed in orbit trim and orientation 

The combination of these two tables was used to determine the vehicle mass properties 
*5 P™^ 155 , 1011 consumption. These tables were also used in calcEig 

K ^ RRV design COuld support - The P r «ent design 

ri as , the . CG of P a y loa d below the center of pressure of the vehicle. Thus heavier 
payloads up to 1730 pounds (gives a 5000-pound RRV) help the CG balance for 
reentry. Lighter payloads, however .than the standard RM ballast will be required to 

W?A a'cc 'SWnr* f0r For * 600 l^uS q paXd 

with a CG 60 inches from the nose would require 175 pounds of ballast This 
hypothetical payload would achieve a 48.8-foot spin radius as seen at the payload CG. 

Table 6.3-6. Mass Properties Launch Configuration 
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Table 6.3-7. Extended Vehicle Mass Properties 


Component |Mass 

MAIN SUPPORT STRUCTURE ~268 
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MASS 
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-0.08 


Y Z 

-0.08 579.3 


PAYLOAD OBSERVED SPIN RADIUS 

,.y 


MOMENTS OF INERTIA 

,x «y lz 

1.438E+09 1 439E+09 2.153E+06 


SHADED VALUES ARE VARIABLE 


6.3.4.9 Vehicle Scaling 


ne Wl°»d design study contemplated alternate payload module sires for fewer total 

, f • 5 smau,:r payload ca P aci ‘y was then applied to the vehicle design as well The 

rationale for a smaller vehicle would be to achieve a lighter launched mass and possibly ride on a 

ess expense vehicle (Taums,. The problems with downsizing, however, am , ha, the same 

vetacle funenons must be supported regardless of vehicle size. Specifically, the GNC system must 

p orm with the same level of accuracy as in the baseline design to allow for a Conus White Sands 

vety e ve icle s power production capability was based on a zero gravity DRM- 1 mission 

our smaller versions of die RRV were examined. The first design was capable of holding a 

32-inch diameter Payload Module. This mexiule contains .5 rodents. This vehicle is depicted in 
cross section in Figure 6.3-44. 
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Table 6.3-8. 15-Rodent Mass and Power 
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Scaling down further to a 12-rodent configuration 
properties as shown in Figure 6.3-45 and Table 6.3-9. 


gave a vehicle with dimensions and mass 


»36 pounds. capabiii,y ° f 156 wms - Md w ° u|d ^ 

satellite functions and still supply sufficient fLer'to ^ 

incorporates Nickel Cadmium batteries replacing the nickeUvdm, i ^ 

This design also requires the development of an 8 inch Air Y 860 ^ ** basehne desi S n - 
analyses, it appears that this design would he ■ n ' mS1 ' Wlthout Conning detailed 
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Figure 6.3-46 depicts 

power. 
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Table 6.3-9. 12-Rodent Mass and Power 


TOTAL* 
(LBS ANO INCHES) 



mass margin 
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Figure 6.3-46. 9-Rodent Module Configuration 
Table 6.3-10. 9-Rodent Mass and Power 
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decreases with the cube of the vehicle radius. Thus, a 60 day mission would be difficult to suooor, 

r e p ~ on —■ ™ s — «• - « jez 

g (70-nch) Taurus. However, it would probably require launching in a nose-up attitude 
us, negaung late payload access and single direction g loading on the payload. 
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The final downsizing to a 6-rodent configuration is shown in Figure 6.3-47 and Table 


™ s design would easily fit on small (Taurus) launch vehicles. However its 6-roden, 
pact y is below the minimum scientific sample size of 7 rodents. In addition, the less than 100 

,r;ZI * “"■* ““ , ' KO " nexib,lil y“d Po^r available to 

The scaling design exercise indicated that a smaller RRV does not offer the fUv-h-r. 
handle the different payloads presently manifested to be flown. In addition, the principal rationale 
tor downing (flying on a smaller bister, requbes a major downsize, and would no, meet the 

rr 01 ' * ' “ re “ ablC “ *' toSdine design - lowr reliability, in pan caused by 

e decrease in the redundancy levels, would make a Whin, Sands landing difficult given range 

J R ~' nT ti ° n ' C ° St SaVingS &Dm ‘ h ' Chcaper boostcr can be offset by flying 

two RRVs on a Single Delta, as discussed earlier. X S 

6.3.5 Control, Command and Telemetry 

The t control functions for the structural subsystem apply ro operation of the Astromasts 

cons ,s the CMC. The latch operation and Astromast functional status are telemetered to 
ground before initiation of final reentry maneuvers. 

6.3.6 Structure Test 


The s,ruc,ure subsystem requires special testing for the astromasts, and pre-reentry 
ttachment system. The asnomasts shall be tested a, the vendor for proper deployment and 

"e"Il ,f 0rmal “ d failUre m ° de COndid ° nS - ° Perad0n ° f 311 cable sys'ems and slip 
g assemblies (for power and dan, transmission) shall be checked as well. The pre-reentry 

attachment system shah be tested to ensure capture between the two modules in both Z2Z 
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misaligned cases. The test shall be performed for each of the six actuators using a vehicle 
simulator. 


6.3.7 Conclusions 


The RRV structural design, being modular in nature, provides for easy access to all 
components and subsystems. This is especially important when operating a reusable vehicle. The 
structure is also easily repaired in sections, so that any landing damage can be quickly replaced and 
the structure readied for another flight. For refurbishment, each major module can be replaced, or 
units on the module, once the vehicle is disassembled, with minimal impact on other subsystems. 
Standard refurbishment after a flight would include replacing the nose and conical heat shield 
submodules, inspection of all high stress areas, replacement of any damaged members, and 
removing and replacing the Astromasts. The masts would be sent to the manufacturer for 
checkout, and refurbishment as required, before being approved for reflight. 
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Figure 6.3-47. 6-Rodent Module Configuration 


Table 6.3- 1 1 . 6- Rodent Mass and Power 
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6.4 Reentry Thermal Protection Subsystem 


6.4.1 Introduction 

ability t l Pri T y “° liVaIi0n in PUrSUing lhe Reusable Satellite concept is the vehicle's 

abthty de-orbit and reenter the atmosphere for consequent recovery and refurbishment n 

atmospheric reentry, the veh.cie's aerosheil will experience an aerr* Zf 

mumrates on the order of 60 80 W/cm*. Such an environment necessl.es the use o7 reZ 

dtern^ protection material capable of withstanding these hea, loads while effectively insula, ng .^ 

veh.de s substructure and internals. This section describes the assessment 

e reentry t ermal protection subsystem requirements for the SAJC RRS design. 

6.4.2 Modeling Tool 


tool canIh, a T ^ ° f ,he RRS ^ Potion subsystem, a modeling 

apable of pred.cng the pyrolytic, charring, and ablative response of prospective aerosheil 

“ zxi sinct ,he — wouw inTO,vc ~ 

au/i fa., numerous descent trajectones. a modeling tool which was user friendly 

s running was preferred. A tool which fits these requirements is the SAIC He 1 h 
ystem-Level Ablation Penetration Erosion Model (SLAPEM) computer code (Ref 1) SLAPEM 
omputes the response of reentiy body nose cones and hea, shield to severe aer he ^2 

ZT 7 r~' S ■ ^ ^ inC ‘ UdeS indepth hea, conduction 

charring, and thermochemical ablation. uction, 


6.4.3 Model 


The T aerOShe " ra0de ' *» assessment is presented in Figure 6 4- 1 

T e reentry thermal protection system consists of a layer of hea, shield material of varying 

“ of ^ co„f,g„ra,ion^: 

assessment, five analysts locations were chosen as indicated in the figure The locations 

onsisted of the nosetip, 40 “ away from the nose, ip, die sphere/cone transition point a, 70 “ and a, 

the midpoint and extreme af, locations on the conic portion of the aerosheil Th! », ' 

substructure was modeled as aluminum, 0.145 cm thLness, whreh “ ^ ^ 

of he proposed vehicle substiate of aluminum honeycomb. The backface of the substructure was 
treated as a perfectly adiabatic boundary. 
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Figure 6.4-1. RRS Aeroshell Model 

The h “‘ shield "“'rial modeled in the assessment was a cured foam silicon elastomer 

d T ^ deSi * na,ed ESM1 °° 4AP ^astomeric Shield Material). This blend 
of ESM provides a low weigh, thermal protection system with well characterized thennal physical 

n S T S “ CCeSSfU " y ni8h ‘ KS,ed <Ref 2) ' The thermophysical properties of 
ESM 1004 AP are described in Table 6.4-1. These properties were incorporated into the SLAPEM 
material response routines. 

These J? ree " 0y trajeC '° neS considered ■" the analysis are presented in Figures 6.4-2 and 6 4-3 
Tiese trajectories span the full spectrum of anticipated RRS reentry scenarios. 

6.4.4 Assumptions 


. „ , The PnmMy assum P tio " I" the response analysis was that the backface of the aluminum 
sub tiate was heated as an adiabatic bounda^. The heat shield sizing philosophy appl^TZ 

ana ystOioweuer, dtcmed tha, an acceptable aeroshell thickness had been amved a, when for a 
^ aeroSMI backface fenced a temperantre rise of no greater than 20»K. 

reasllte aCr ° SS ' hC baCltfa “ b ° Undal7 ^ SmaI1 and adiat>ad ' assumption 
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Figure 6.4-3. Reentry Model Trajectories-B 





6.4.5 Results 


The reentry heating rates predicted bv SI APFM f ^ 

■he vehicle nosetip are presented in Figure 6 4 4 A , T™ ‘ A ' 2A ' and 3A 31 

trajectory 3A is the most severe. The heat sizine an * ' ° m thlS result ’ for ‘he nosetip, 

SLAPEM at each station, gradually thickening Je^ COnSecuti « °f 

helow the mandated 450°K. This was performed t, T* ** Substrale tem Perature remained 
A compendium of the resuits is 

recession for the spherical portion of the aeroshell Alnn ' .t, '^ resul,s in ,he hi * hesI 

results in the thickest heat shield requirements. Figure 6 4^5 „* C ° mC mjmory a,s ° 

predicted recession, and char depths for this trajectory Th "Tt ' ' ‘ h ‘ CkneSS ret l uir ements, 
shield weight of 389 kg. J Th< thicknesses result in a total heat 


6.4.6 Conclusions 


heating and ablative environm^nt^ H?,!!^ !!!!^ 10 thc most aero- 

■herefore, this trajectoty drives the heat shield thick predlc,ed for re enny trajectory 3A and, 
“ ' he ShWd ^ 
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ies 1A, 2A, and 3A- Vehicle Nosetip 





Table 6.4-2. ESM Thickness Requirements and Total Predicted Recession 
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Figure 6.4-5. Results - Heat Shield Thickness Requirements 



6-5 Propulsion 


6.5.1 Functional Operation 


phases. 


The propulsion subsystem provides the following functions during 


the various mission 


fele^^ 3) 

L“tiL Pnral " 8 ‘ he PrOPeUant '° ' he * ta -“ "» ~o» su hsystem is now 

Fortitislt 8 , IT"’ ' h ' “°” S “ bSyS,em “ ^ t0 “ « ch ^ spin speeds, 
this case, 1 Him of spin speed adjustment and 1 0 feet per second of drag makeup am reouired 

After completion of mission, the vehide is spun down and teonented for AsLa^"' 

«A13 De-Orbit. After retraction, the ground mack is aligned for the de-orbit maneuver The 

desorb,, maneuver is perfumed in two parts, a main bum and trim bums as required Finally the 

:r; y :ro^™^ dsp - t2 - 

6.5.M Reentry-Recovery. The mission sequence is completed after atmospheric entrv 
when the propulsion subsystem safes for recovery. This emails closing the latch valves and 
lining e minister valves to purge propellant from the thruster manifold. Final safing is 

ensurestiiat the^RRV^prorTl ” "" T * “* “ ,Uen “ bunCh Vehide “P*™™- This 
prapeTalttl ^ ^ ^ “ - — inhibits preventing 

6 5-1 ^!T3r hiS ' OTy “ dProP '“ an ‘ bUdg ” example fOT a DRM -> nhssion am given in Table 
o.o i. this budget assumes that a 25 feet ner coonnH K • . . 

. . CCI P” secon d tnm bum is required after cemntinn 

•he launch vehicle. The vehicle is then m-orie„,ed for optimal the! con^sTd “ 
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dUmrbance torques prior to Astromast operation. After Asoomast 
° 115111 ^ 1,5 8 artificial gravity mission) is performed. 


extension, the spinup maneuver 


6.5.2 Requirements 


6.5.2. 1 Top Level Requirements Th<» pny , . 
increments to the vehicle L separL ^ ^ h^ ^ 

Jin speed contioi, minor ottiital adjustment, and mo^ltiy “Zf “T 
design has to provide highly accurate rnn^n ki , b maneuver - The 

dispersion requirements. ' total tmpulse in order to meet the landing 


— "zzsttzssrxzzrr.'r- 

combination of failures other than . S1 ^ n con ^ 1 8 urat ion ensures that no 

trade studies is included in Table 6.5-2. ' perform the design 

feasibie, and to ensme WheneVer 

Pay '° adS ^ ^ aritficial 

that the gravity level be selectable at any^ue^^n' oTg ^ SUbSyStem is 

± 10 %. ‘ ® ^ 1 ^ ® ^ be niaintained to within 


gravity missions. When fulIy^Li ^ITaTToo n" ^ ^ 

structural safety factor. d 13 b ln order to mainta in a 2: 1 
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Table 6.5-2. RRS Design Reference Missions 


• FIVE DRMs REVIEWED FOR RRS APPLICATIONS: 


DRM # 

Character 

Inclination 

Altitude km 
(nm) 

Orbit Type 

Launch 

Site 

Recovery 

Site 

1 

Land Recovery 

33.83° 

350 (189) 

Circ 

ETR 

WSMR 

2 

High Altitude 

33.83° 

900 (486) 

Circ 

ETR 

WSMR 

3 

High Inclination 

98 

897 (484) 

Circ. Int 

1 WTR 

WSMR 

4 

Integer Orbit 

35.65° 

479 (259) 

Circ, Int 

ETR 

WSMR 

5 

Water Recovery 

28.5° 

350 (189) 

Circ 

ETR 

Water 

(ETR. WTR, Gulf) 


* DRM 1 , 2, & 3 SELECTED FOR USE IN STUDY 
Abbreviations: 

DRM Design Reference Mission 
Circ Circular 

jnt Integer 

^32 Eastern Test Range 

Westem T$st Range 
WSMR White Sands Missile Range 

Gulf Gulf of Mexico 


f . 11,6 2610 gravity imposed a not-to-exceed acceleration level of 1 x 10' 5 g for 95% 

Of .he mrsston and less than , x 10 -3 g during , he remainder ^ , x 10 .3 l > 

imposed a maxtmum thrust level of 0.6 lb each for the attitude control thrusters. 

Of rhe 2' K " K deSiP requireD,cra ,evied b y «* «*=»« payload was to minimize the drntst level 
of dte de-orbt, bum. Since this is the only rime, other than launch, when an accelerant^ 

8 1S applled t0 ,he ve htcle in a direction that changes the "floor" of the experiment the 
de-orbit maneuver thrust must be less than 0.25 g. ^ ’ h 

rtLIrr ImPU, : e »f the five DRMs, and the corresponding 

de orb., bums, was used to derive dhe total impulse requirement for the vehicle. The teenL tradf 

yses studied de-orbit bums ranging from 328 to 1174 feet per second. The 1174 Zt per 
second bum, combined with an arttflcial gravity mission a, „ gtrrospondedt Z 2 £ 
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propulsion system sizing analyses. For this mission, the de-orbit bum constitutes more than 80% 
of the total propellant required. 

Since the impulse requirement is related to the vehicle mass properties, a propellant budget 
based on the latest vehicle design data was calculated and compared to the simulations performed 
for the propulsion subsystem trade study. From the updated mass properties and reentry analyses, 
a total impulse requirement of 1 30,000 lbf seconds was baselined. 

6 . 5.3 Trade Study Summary 

The propulsion trade study looked at weight, cost, performance, complexity, power 
consumption and hardware availability to determine the optimal propulsion subsystem for the 
RRV. The study considerations and analyses performed are outlined in Table 6.5-3. The first cut 
trades are documented in Table 6.5-4. 

The all-liquid subsystem was selected because it had lower life cycle costs, provided a low 
g de-orbit bum capability, was restartable, delivered accurate impulse, and was inherently flexible 
to accommodate various orbits, orbit changes, spin speed changes, and de-orbit profiles. The 
results of the liquid subsystems investigated are presented in Table 6.5-5. 

Table 6.5-3. Propulsion Study Considerations 


• REQUIREMENTS — SUPPLY A VELOCITY FOR: 

- Orbit Adjustments (Minor) 

- Spinup/Spindown 

Attitude Control/G-Level Control 

- Deorbit Maneuvers 

• FUEL OPTIONS CONSIDERED 

- Monopropellant - N2H4 

- Bipropellant 

- N2H4 + N2O4 
-- N2H3CH3 + N2O4 

- Solid (Deorbit Only) 

- GQ2 + GH2 

• PRESSURANT OPTIONS CONSIDERED 

- Pressure Regulator 

- Blowdown 

• WEIGHT BUDGETS 

- Mass Properties 

- Deoribit AVs for DRM-3 
Mission Used for Sizing Tankage 

- Margin/Residuals Calculated 
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Table 6.5-4. First Cut Propulsion System Trades 


Item 

{solid Motor tor De-Orbit 
Burn With Liquid Attitude 
Control System 

Pros 

Simple-Low Cost 

Cons 

Comments 

Nonreusable 



Requires High Spin Rate 
for Thrust Averaging 
(20-50 rpm) 

Science Desires Not Met 



Impulse/Velocity Error of 
0.5% 

Major Contributor to 
Landing Inaccuracy - 
Can Perform Trim Burn 
With Liquid System 



High g Bum 

Science Desires Not Met 

All Liquid System 


Not Flexible 

Changes of Motor 
Propellant Load Difficult 
to Perform in Timely 
Manner 

flexible System 

Highly Accurate Impulse 
Delivery 

Reusable 

Low g Deorbit 

Higher Nonrecurring 
Cost 

Minimize Landing 
Dispersion Errors 

Trim Burn Capability 



BASELINED ALL LIQUID SYSTEM 


Table 6.5-5. Liquid/Propellant Trades 



Pros 

Cons 

Monopropellant 

(Baseline) 

• Simplest - Lowest Initial Cost 

• Helps Spin Balance 

• Lowest Refurbishment Cost 

• Thruster Tolerance to 
Temperature is High 

• Lowest Performance 

• High Propellant Freezing 
Temperature 

Dual Mode 
Bipropellant 

• Existing Hardware 

• Higher (314 sec.) Isp vs. 235 sec 
for Monopropellants for Major 
Burns 

• Complexity 


• Lower Propellant Mass 


Bipropellant 

• High Isp 

• No Existing Engines Less Than 
2.2 lbs Thrust Rules Out System 

gox/gh 2 

• Highest Engine Performance 

• Heavy/High Volume Tankage 
Rules Out System 


6.5-6 



The baselined monopropellant subsystem has the lowest hatdwaro cost (half the number of 
tnes and valve seats as a bipropellant subsystem). This also lowers refurbishment time and cost 

n adthtion, monopropellant subsystems are tolerant of high and low propellant temperatures thus 
simplifying the vehicle thermal design. 

Another unique advantage of the monopropellan. subsystem is that i, requires more 
propellant than a comparable bipropellant subsystem. At first glance, this would be deemed a 
sa vantage. However, the SAIC design has the two opposing vehicle halves separated by 100 
oot stromasts. The rntent of this design technique is to increase the radius that the payload 
js when die vehicle is spun. The more mass in the Deployed Module, the greater the spin 
radius. Thus a lower performance propulsion subsystem assists in achieving a greater spin radius 
tor the payload by increasing mass in the Deployed Module. 

The trade study observed that the higher performance propulsion subsystems weight 
savings were no. enough to allow ,he use of lower cos, launch vehicles. Thus, the added 
propellant weight required by the monopropellan. was no, deemed a negadve factor. Finally, die 
monopropellant subsystem makes the greatest use of existing, qualified, flight proven hardware. 

6.5.4 Baseline Design 

^le«T> n ™ / he Pr ° PUlSi0n SUbSyS ‘ em " 3 m ° n0propeUam that uses 

hydrazine <N 2 H 4 ). The design ,s composed of 18 thrusteni, and perfoims two disdnc, functions 

Six 100 pound thrusters are used for major maneuvers and de-orbi, bum, and twelve 0 5 Ibf 

thrusters are used for attitude control (AC). The major maneuver thrusters are operated in two 

groups of three, and the AC thrusters are configured in two groups of six. The AC thrusters are 

further arranged m modules of three thrusters 180“ apart on the backface of the vehicle. The 

thruster groups are isolatable by bistable latching valves. 

As depicted in Figure 6.5-1, the propellant tanks are configured in two sets of three 

isolated by bistable latching valves. The two serf of propellant ranks are connected via a line and 

anot er atch valve. The tanks are 19-inch diameter spheres with internal robber bladders for zero 

gravity propellant expulsion and propellant management. The subsystem uses helium as a 

pressurant gas and operates in blowdown mode such that the initial pressure is 350 psia and the 

minimum end of life pressure is approximately 75 psia. Each rank has a capacity of 100 lbs of 
hydrazine. 
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-VUIUU^ 

^ tank r tthed ? k m,a ekmm d ° K ~ *> 

addition, all valve a«/» m kr . ucer to measure the propellant n„„ 

vajve assembhes have a built-in filter n L P™penant line pressure. In 

“ ^ •» ^ having “* - * **■ ^ ^ m 

"* dr "" Valv “ « located on the ,hru SKr Lcs “ 7 ^ VaJvC ' Addi *>„al fill 

" S '° a "° W fOT « - -d flustypurge operations 

6 SA 2 Pr «P«lsion Electrical Desien -n. 

commands from the GNC snbsystem. The 0 * 727 '™" «" ^trica, 

*«c redundant Valve Driver Units (VDU) pais. <te ' iVerS commands to 

22 °“ ,PU ‘ cl>anncls ha Eacb' “tostrTajt l^a ‘^“"^‘"^“Patrftwo.: to providing 
—acb.d. VW 
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As shown in Figure 6 5-2 vnrr w 

TSr Va,VC • £™P oTIac ,r V ' r U " i,S ' ProVidi " g 22 «rves 

ehnisna* ' tC'" 35 3 baCk “ P aCtiVa,0r ' ln *Milion VDU lH “ ^ ‘° ‘ he 0tl,er 

; d 7 for ,hc o,her ^ ^ ^ 

Additionally VDIJ T ic ° r va ^ ves for which VDII i • ’ 

^ U 3 ' S ‘™ 10 * — ** *« ' ' S the ««. 

(VDU 3) coils on ihcllin ihmT ^ ^ VDU 0pe ™ e lh ' P™naiy (VDU I) and 
reauirinw remain thruster isolation latch valves rt, , 1} md secondary 

£ one command for valve open a„ d a separate commandforvalve do^° U ^ C aC ^° n va ^ ves ’ 



figure 6.5-2. 


Propulsion Electrical Schematic 


6.5-9 



VDU 2's primary function is to operate the de-orbit thrusters, and to serve as a redundant 
control of the thruster isolation latch valves and tank interconnect latch valves. 

6.5.4.3 Components 

6.5.4.3.1 Tanks. The propulsion tanks are 19.1 -inch spherical titanium tanks with internal 
bladders made of AFE-332 rubber. The tank has a nominal operating pressure (initial loaded 
pressure) of 377 psia. It has a minimum 2: 1 safety factor of operating pressure to burst. The tank 
is flight proven and has a qualified propellant volume capacity of 2748 in 3 . This gives a nominal 
propellant capacity of 100 lbs per tank. The propellant capacity is presently limited by the 
diaphragm design. A delta qualification can be performed to achieve a propellant load of 1 10 lbs, 
using a 3021 in 3 propellant capacity diaphragm. This would give an end of life pressure of 70 psia 
assuming a 377 psia initial load. As currently configured, the tank incorporates a four-bolt polar 
mounting scheme with a 1/4-inch propellant and gas port on each boss. Again a delta qualification 
may be required to increase the port diameter to 3/8-inch to limit pressure drop during main thruster 
burns. 


Each tank, as presently configured, weighs 13.3 lbs. 

6.5.4.3.2 Main Thrusters. The main maneuver thrusters are Hamilton Standard REA 20’s 
(Figure 6.5-3). 

This thruster has flown on the MARK II vehicle and will fly on the Gamma Ray 
Observatory. The thruster incorporates a catalytic thrust chamber assembly using Shell 405 
catalyst The thruster nominally has a 40: 1 expansion ratio bell nozzle. The RRS will require the 
design of a scarfed nozzle having a minimum 30:1 expansion ratio. The present configuration 
thruster incorporates a single coil single seat valve assembly. A delta qualification will be 
performed to provide a dual coil, dual seat configuration for the RRV. The new configuration 
thruster will weigh 5.5 lbs compared to the original 3.43 lbs. The weight increase is attributable to 
the additional valve assembly. 

6.5.4.3.3 AC Thruster. The attitude control thruster is a Hamilton Standard REA 17-7 0.5 
lbf thruster (Figure 6.5-4). 
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IDENTIFY 


#10 (0.190W2..' V,J F-38 
9 HOLES 

EQUALLY SPACEO, 


2.690 OIA. BSC 


> 39 MAX- 



PROPELLANT 
INLET PORT 


11.35 MAX- 


5.10 OIA 
MAX 


VALVE PIGTAIL 
LEAOWIRE 


K THRUSTER 
CONTROL VALVE 



5.80 OIA 
MAX 


‘ THRUST CHAMBER 
THRUST CHAMBER HEATER 


REA 20 THRUSTER 


COMPONENT 

| WEIGHT (LB*) j 

MARKS 

THRUSTER 

ORO THRUSTER 

THRUST CHAMBER ASSEMBLY 

2.20 

2.20 

P*OPEUANT CONTROL VALVE 

1.90 

0.00 

THRUST CHAMBER HEATER 

0.21 

0.21 

CHAMBER TEMPERATURE SENSOR 

0.06 

0.09 

PROPO-LANT VALVE HEATER 

0.02 

0.02 

TOTAL 

3.70 

3.43 


1M-31A 

REA 20 THRUSTER WEIGHTS 

Figure 6.5-3. Hamilton Standard Main Maneuver Thruster 


Over 232 thrusters have been built and down on a DoD program. The configuration has a 
dual sea, Wrigh, propellant valve. The thruster has a 135:1 expansion ratio bell nozzle. The 
thruster valve would require modification and a delta qualification for the RRV dual coil valve 
configuranon. The thrusters are grouped in series of three to allow common hearer and hea, shield 

use. This will save power and overall subsystem weight. The REAI7-7 estimated weight is 1.0 

lb with the dual coil, dual seat valve. 


«.5.4.3.4 Latching Valves. The latching valves are bistable dual coil/single seat units 

manufactured by Vacco Industries. The Vacco valves are flight qualified and will fly on die Aussa, 

and UHF follow-on satellites. The valves incoiporate an all-titanium construction and have 

teflon soft seats. The current valve has a 3/8 inch inlet/exi, pon. The RRV configuration may 

require increasing die sea, and inlet/exi, port diameter to 1/2 inch to limit pressure drops during the 
de-orbit bums. 6 
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0.5 LBp THRUSTER ADAPTED FOR DUAL SOLENOID VALVE 


Figure 6.5-4. Hamilton Standard ACS Thruster 

6.5.4.3.5 Filters. The main filters are an etched disk titanium element in a titanium body. 
They are manufactured by Vacco industries and have 1/2 inch inlet and exit ports. The filters 
weigh 0.5 lb each. 

6.5.4.3.6 Fill/Drain Valves. The fill and drain valves are all titanium designs incorporating 
a hard seat. The valves are manufactured by Vacco industries, and have been successfully flown 
on numerous long life space vehicles. The valves incorporate a triple redundant sealing scheme to 
ensure no helium or propellant loss during a mission. 

6.5.4.3.7 Pressure Transducer. The pressure transducer is a Gulton Industries piezo- 
electric sensor. The unit has a pressure range of 500 to 0 psia and an accuracy of ±5 psia. It has 
flown on all Hughes HS-376 class satellites. 
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6.S.4.4 Interface Support. The primary electrical interface for propulsion is the GNC sub- 
system. This supplies all commands for system operation and thruster firings. The only 
commands not controlled by the GNC are the line and tank heaters that are controlled by switches 
independent of other systems. Table 6.5-6 details the other subsystem interface support for the 
propulsion subsystem. 

Table 6.5-6. Propulsion Subsystem Interface Support 

• Payload: No Requirement 

• GNC: Controls Valve Operations 

• TT&C: Telemetry State of Health Safe and Arm of System 

• Power: Provide Heater Power, Valve Power Through GNC System 

• Reentry: Supply Rotation Prior to Reentry 

• Thermal: Prevent Freezing or Overheat During Reentry Soak 

• Structure: Support and Alignment for Thrusters, Supports for Tanks 

• LV Adaptor: No Requirement 


6.5.5 Command and Control 

Propulsion subsystem control is provided by the GNC subsystem with a ground override 
capability through the TT&C subsystem. Nominally, all bums are performed in a 3-axis thrust 
pulse modulation control scheme. This entails turning on or off at sufficiently high rates (on or off 
pulsing at 1 to 400 Hz) to align the thrust vector or offset to the CG of the vehicle. The rate is 
selectable by the GNC subsystem such that fundamental modes of the structure are not excited. 
Though CG alignments of the thrust vector produce pure translational motion, offset alignments 
produce combination translation and rotation. Thrusting perpendicular to the CG produces pure 
rotational motion. Nominal operation requires that all AC thruster operation be performed with 
pairs or thruster couples. The de-orbit maneuver uses all six main thrusters operating on a single 
set of coils. This ensures that any failure occurring during the bum does not necessarily require 
termination of the bum. Telemetry for the propulsion subsystem entails tank pressures and 
thruster temperatures for prefire condition. Other data includes tank and line temperatures and latch 
valve position switches. 
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6.5.6 Test 


The thrusters are acceptance tested, hot fired with slave valves, while the flight valves are 
installed on the vehicle. This lowers the cost and delays associated with hot firing the thrusters 
using the flight valves. The propulsion subsystem testing performed at the contractor includes leak 

test of all valves and the entire subsystem, as well as proof pressure testing to 1.5 times maximum 
operating pressure. 

6.5.7 Manufacturing 

The RRV propulsion subsystem is installed on the Deployed Module main structure by the 
propulsion subsystem integrator. The tanks, latch valves, and thruster valves are all installed 
during the RRV manufacturing/integration process. The thrust chamber assemblies are installed 
during final vehicle assembly before subsystem test. The design goal is to employ a fully welded 
subsystem. This minimizes leak checks before and after flight. The detriment to an all welded 
subsystem is that component replacement is more difficult. 

6.5.8 Refurbishment 

Propulsion subsystem refurbishment is accomplished by purging the subsystem of 
remaining hydrazine, cleaning the subsystem with isopropyl alcohol, and drying and testing of all 
valves. Valve testing will consist of electrical, functional, and leak tests. The purge and dry 
operation can be performed by applying a vacuum to the subsystem as the tanks are rated for 
vacuum (-14.7 psid). The thrusters are removed from the valves and hot fired to determine their 
reusability. The total propellant usage of each thruster is estimated and a thruster is ineligible for 
reflight if it has come within 75% of the estimated lifetime propellant throughput. 

6.5.9 Conclusions 

The RRV propulsion subsystem implements flexible, highly reliable, and reusable design 
techniques. The high accuracy impulse delivery, along with the high total impulse capability, gives 
a mission flexibility not possible with other designs. The system also has built-in growth 
capability by using larger tanks or going to a dual mode system or both. The RRV can easily 
accommodate 23-inch tanks, giving a 77% increase in propellant capacity with only ~30 lbs 
additional dry mass. The dual mode system provides for 30% higher specific impulse and, 
coupled with larger tanks, can provide 2.3 times the presently designed impulse capability. 
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6.6 Guidance, Navigation and Control (GNC) 

The propose of the Guidance, Navigation and Control (GNC) subsystem is to provide 
overall command and control of the vehicle from umbilical ejection though post-flight securing 
Functions to be performed include: 

• Vehicle Health Assessment and Safing 

• Vehicle Attitude Determination 

• Vehicle Attitude Control 

• Precision Orbit Determination 

• Precision Reentry Control 

- Pre-Bum EMU Alignment 

- Thrust Vector and Bum Duration Control 

• Precision Evocation Determination 

6.6.1 Operations Timeline Support 

Since the RRS cannot operate as an integrated vehicle without the GNC, operations 
concenung the GNC subsystem occur during all phases of the RRS operations. The following 

discussion presents an integrated view of GNC operations/requirements commensurate with the 
operations timeline discussed in Section 5.0. 


. .1.1 Pre-Launch Phase. The pre-launch phase begins with mission initiation and consists 
o payload selection, mission planning, experiment verification, biocompatibility testing vehicle 
integration, and launch site activities. The following GNC requirements apply during this phase: 

° NC reituirera '" ts a " d develop/test any software 

b. Perform GPS/EMU launch pad alignment checks. 


6 6 . 1.2 Vehicle Operations. The GNC subsystem must perform the following functions 
during RRS operations. Those requirements identified with an asterisk (*) are specified by the 
NASA SRD. AU others have been derived in the development of preliminaiy vehicle design. 


6.6. 1.2.1 General. Ute following requirements apply to all phases of vehicle operations: 

” " CMa °' f ~ as 
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(*) 


(*) 


b. Provide on-orbit calibration of inertial (IMU) reference. 

c. Perform relative and actual three axis position/velocity determination. 

d. Provide telemetry data necessary for precision orbit determination. 

telemetry^nd rec’ov^o^rSl s rad ° n (lmpact) ’ and attitu de data for tracking beacon 
f. Control all propulsion subsystem operations. 

maneuvers. ^ thFUSt vector a PPbcation for attitude, orbit adjust, and de-orbit 

h. Provide for closed and extended mode de-orbit operations. 

i. Execute -al-mWstored commands „ create/mamtain pmper vehicle conf.gumdon 
J ' 5? Valida,e gro “" d repr °« ram ™n 8 ofGNC/pmpulsion and payload onboard 

paylo^safcty^i^^at order^pr^etfc a nce S ^ edS ’ “ neCeSSa °’' t0 cnsurc vehicle and 
1 Pr ° Vide State -° f -Health and payload data control and storage. 

and delivery to the PI consistent with 

6.6. 1.2.2 Launch Phase. The launch phase begins with liftoff , 

* 10 RRV/LVA TV following requirements apply: ^ 

destruq ^nu^i^^^y catastrophic launch failure. (Assumes 

b. Determine injection location and attitude in any orientation. 

c. Provide attitude control and de-orbit operations in the event of payload release failure. 

( ) d. Adjust orbital parameters to correct launch errors. 

aad concludes 

6.6.1.2.3.1 Pre-Mission Checkout 

preparation^^ attitude for safe extended operations in 


(*) 
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b. Provide controlled, common rate extension of tri-mast assembly. 

c. Monitor nut-deployment mechanism (NDM) for proper operation. 

d. Activate/control all three lanyard retraction mechanisms in event of any NDM failure. 


6.6.1.2.3.2 Mission Operations 


(*) 

(*) 


a. 


Control attitude rates to provide a uniform gravity environment for the entire payload 
during selected portions of flight. J 


b . Microgravity (Figure 6.6-1) 


1 . Control gravity levels to <10' 3 during the entire Orbital Flight Phase, and <10 5 

during 95% of the phase. “ 

2. Payload magnetic field levels shall be minimized during the entire Orbital Flight 


• Extended Vehicle 
Provides for Power and 
Radiation Exposure 
Requirements 


• Momentum Wheels 
Provide Thermal 
Rotisserie About 
Long Axis Without 
Disturbing Microgravity 


• GPS and Magnetometers 
Provide Attitude 
Information for Torque 
Rod Attitude Control 


DEPLOYED MODULE 



Closed or Extended 
Operations 


Minimize Extension to 
Minimize Gravity 
Gradient Effects 



MAIN 

MODULE 


ECLIPTIC 


• Magnetic Control 
Used to Minimize 
Power Consumption 
and jaG Disturbance 


• Astromast Extension 
Minimized Consistent 
With Mission Operations 
and PM Magnetic 
Environment 
Requirements 


• Thruster Control 
Available if Greater 
Control Authority 
Needed and/or TR 
Magnetic Field 
Undesirable 


TOR42E/07 


Figure 6.6-1 . GNC Orbital Flight - Extended (xG 
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(*) 

(*) 


(*) 


C. Fractional gravity (Figure 6.6-2) 


1 • 2 &s *£53,? ±,o% - “ *“** ac “" « - v 

2 ' f ° r 1116 “* Perpendicular to the s P* n •» establish a 

3. Provide inertial monitoring/control and independent reference assessment of 
vehicle dynamics throughout the full 360 degrees of rotation. ° f 

4 ‘ safety^ monitorin g /corTection of the structural dynamics/stresses to ensure vehicle 
5 . Provide the capability to de-spin for microgravity levels in the same flight. 


.1.2.4 Recovery Phase. The recovery phase consists of the following three phases: De- 
orbit, Reentry and Terminal. The primary requirement for these phases is that all perfonnance- 

cntical functions shall be fail operational (i.e., no single failure shall preclude required performance 
and/or jeopardize public safety). 


Vehicle Rotates 
Within Orbital Plane 
to Provide Artificial 
Gravity Up to 1.5 G 


GPS Provides Precision 
Orbit Data 
Without Extensive 
Tracking Support 


Vehicle Spun-Up in 

~ Minutes 

Using Attitude Control 
Thrusters 


Thrusters Controlled 
to Preclude Mast 
Modes Excitation 



GPS Provides Immediate 
Attitude Information 
Under Any Attitude 
Condition Ensuring 
Rapid Recovery From 
Any Unexpected 
Anomaly 


Scan Wheels and GPS 
Provide Attitude 
Information for 
Thruster Control 


TOR42E/08 


Figure 6.6-2. Extended Vehicle - Artificial Gravity 
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6.6.1J.4.I De-orbit Phase. The de-orbi. phase begins with the first de-orbit command, and 

continues unul the vehtele ts aerodynamieally reoriented for reentry. The following requirements 
(rigure 6.6-3) apply: 

a. Prepare for de-orbit. 

(*) b. Adjust orbital parameters for compatibility with recovery site requirements, 
c. Provide pre-bum on-orbit calibration of inertial reference system. 

( ) d. Provide necessary velocity changes for de-orbit maneuvers. 

e. Perform a main bum with a 3-sigma performance that does not exceed the required AV. 
f- Perform a trim bum to attain the required AV within 1-sigma. 

g. Prepare for reentry. 

h. Provide re-orientation for minimum dispersion aerodynamic reentry. 

(*) i. Spin up sufficiently (1 to 2 rpm) to ensure uniform ablation during reentry. 



IMU ALIGNMENT 


DE-ORBIT BURNS 



MAIN BURN 


GNC/IMU Aligns Vehicle for Retrofire. 
Cross Checked by GPS Data 


AERODYNAMIC REORIENTATION 


Provide GPS/Scanwheel Cross Check 
and Initial IMU Alignment 

Perform Precision GPS (- 0 . 05 °) 
Alignment of IMU 

Retract Deployed Module Into 
Reentry Configuration 

Check IMU C Alignment 


GNC/IMU Realigns Vehicle for Reentry 
Cross Checked by GPS Data 


GPS Data Used to Validate 
Orbital Elements for Reentry 


TOR42EA59A 


Figure 6.6-3. GNC Recovery - De-Orbit 


6.6-5 




6.6.1.2.4.2 Reentry Phase. The reentry phase begins when the vehicle is oriented for 
reentry, and continues until the pilot parachute is deployed. The following requirements apply: 

GIObal Posidoni "8 System (OPS) position data 
” SSod™°bK^5 Ute rcleaSC ^ UP<>n m,sslon - de,erm “ ed IMU/GPS/baiometric 


6.6.1.2.4.3 Terminal Phase. The terminal phase begins with pilot chute deployment, and 
continues until landing. The following requirements apply: 

a. Provide IMU/GPS guidance for gliding parachute. 

b. Provide Differential GPS (DGPS) altitude determination for landing. 


6.6.1.2.5 Post-Recovery Phase. The post-recovery phase begins with landing and 
continues unnl: 1) the experiment/data is delivered to the Principal Investigator (PI) and, 2) any 
ground control experiments completed. The following requirements apply: 

a. Power down vehicle to conserve power and minimize thermal load. 

b ' rth beaC ° n/Klemetry wi,h vehicle localion ' attilud =. acceleration, power 


c. 


Maintain command/control capability, including ability 
subsystem and GNC data handling capability. 


to power down the TT&C 


6.6.1.3 Ground Control Experiment Tests. These experiments are used to: 1) verify 

expenment design, 2) verify the hardware biocompatibility and performance, and 3) serve as 
controls for the flight experiments. 


6.6.2 Design Requirements 


The GNC attitude determination and vehicle control requirements encompass all operational 

phases from launch to landing. The operation of the RRS GNC Subsystem is critical to the 
successful completion of an RRS mission. 

6.6.3 Trade Studies 


Although there were no tradeoff studies specifically required by the Statement of Work, a 
study was performed to determine the configuration of the GNC subsystem. The results of this 
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study, presented in Section 6.6.4. 1, Subsystem Architecture, represent a standard application of 
space-proven technology with one exception, the unique use of the GPS for attitude determination. 
The use of GPS receivers to determine satellite position has been successfully demonstrated (e.g., 
LandSat) during the GPS R&D (Block I) operations. 

The GPS, currently deployed into a 6-plane, 24-satellite operational constellation, provides 
worldwide two-dimensional positioning service. The system is scheduled to achieve full three- 
dimensional capability well before the initial launch of the RRS, and will provide excellent 
capability. Although the system's location (positioning) performance (Figure 6.6-4) varies, due to 
the dynamics of the constellation geometry (Dilution of Precision (DOP)), the available system 
performance for a 21-satellite system (allowing for 3 random failures) is generally a factor of 2 to 3 
better than the nominally stated performance (DOP of 6). 


• 21 Satellite Constellation, 12 Hour Plot 

• Receivers at 800Km Altitude 

• GPS Advertised Accuracies are for DOP * 6 


100 


8 



0° LATITUDE 
300° LONGITUDE 
10 CHANNEL 


100 


s 


10 


72° LATITUDE 
195° LONGITUDE 
10 CHANNEL 



TIME (MM) 



TIME (MM) 


34° LATITUDE 
285° LONGITUDE 
10 CHANNEL 




Figure 6.6-4. Typical GPS Performance 
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The potential cost savings achieved by using GPS 
functions (Table 6.6-1) justifies the use of CPS k * S ^ P ° Sm ° n determi ™tion 

use of the GPS rece.vers for atld , de l * ^ * "* RRS ° NC Si "« "* further 

basic fail operational configuration and usTof GPS ^ an5 ' addidonaI hardware to the 

vecors will provide vehiclHitiind^s a ll„7 < a vector, and any two 

function is available at minimal additional cost. y "’ g ,CCl ™ qUe ’ the atn,ude ^termination 



becauseT^tlw ud^e^^poruutehi^Mmplin 06 ^ 61 ' was chosen for the RRS task 

common system errors. Furthermore, the receiver rofLuTfcT" 5 ehn " na “ 0 " of critical 

typical of most other GPS receiver deci™ d " 0t have the low dtitude limit 

accepted in principle, the use of the AWPSN-9 J an STCaW^d' 0 ^ NASA/ ° SFC 

TI 1 meter baseline surveying field test data VK f * detemunatlo n experiment The 

■ion, cleariy demonstrated an acceprable «rf °'7° US,y simulates the 1 meter RRS applica- 

6.6-7) when a microstrip/choke-ring antenna uZlTon' wTuTT aPPhCa,i0n (Fig “ reS 6 6 * 6 a " d 
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• TRIPLE BASELINE CONFIGURATION 
Any Two Provide Vehicle Attitude 
- Dual Port (or Dual) Antenna 
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Figure dM. TI AN/PSN-9 RRS Ccarfiguradon - A Space Capable Precon Poim i„ g CPS Receiver 
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Fi gure 6.6-6. TI AN/PSN-9 Reid Test Data - Geotneuy (DOP) and Multipath 





• EARLY TEST SHOWED SIGNIFICANT DEGRADATION FOR <1 M ANTENNA BASELINE 
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Figure 6.6-7 . TI AN/PSN-9 Field Test Data - Multiple Antenna Configurations 




Table 6.6-2. GPS Attitude Determina tion - Adaption of Ground Proven Technology 

GPS MODES OF OPERATION 
- Time/Position - Normal Operations 

- Single Receiver and Antenna 

~ . t f ast ^ ccurate: Location Within GPS Frame of Reference 
Relative Position - Differential Navigation 

JR* Multi P le Sin 8 le Receiver/Antenna Observations/Sets 

- All Receivers With Common System Error Base 

' 3; ? mer P S®* Surveying ("Interferometer") 

- Single Receiver With Dual Antenna * 

— Common System and Receiver Error 

APPLICABLE FIELD TEST EFFORTS 

- NA |4^; 198 V °?' 8 A “ aaft Azimuth/Pitch Measurements 
23M Antenna Baseline with Dual, Common Clock IPT /Bncr d 


O * w Ay - l yi l HI . 


PRIMARY ERROR SOURCES 

- Antenna Electronic Phase Center 

- Multipath 


6.6.4 GNC Baseline Design 


The unique RRS vehicle architecture requites precise control of the vehicle rotational rate 

:Z“ 8 n n T r sure vehic,e safe,y - th = — - —us jzzz 

‘° ^ aWe ,0 d — » -—e in any random orientation, 

nd is a major obstacle to overcome during the orocess of 

by Congress. 8 P f H g evemual P ro i<« approval 


cunent WfSGNCd ArCl " <eCt “ re ' There 216 a muld tude of desi «" drivers that have led to the 
unen. RRS GNC destgn concept. These drivers can be grouped into tee categories- 1) system 

^ pTacedTz^r « T m : s cumm,y “ ~ - — 

po e system due to the unique requirements of the RRS mission. 

the RRS^?^ deSig " "" infl “ en “ d by ' he SySKm “a, requirements. Since 
““ haS rand ° m °~" dUn " g «*— op-dons, dtere are fteld-of-view restrictions on 
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e sensors used for attitude determinarion. During (he reentry operations, there can be RF and 

i-jrr", T “ retr0fire bUm ' ' h “ S <he ^ ° f ° PS " “ OP^ device such as a 

^ hacker dtumg tins cntical timeftame when a delta velocity error could cause landing outside of 

requtred location. Dunng landing maneuvers, the navigation and attitude references must be 

opera ton m or er to ensure that range safety requirements are met. Since the RRS is opetating 

omous y unng the majority of its mission profile, the GNC must have the capability to 

perform failure and upset re-initialization without intervention. Finally, the system reliability 

requirement of a 0.99 probability of recovering tire experiment in a healthy condition ht 

considerable impact on the entire RRS system design, pariicularly for die GNC subsystem. 

usc °f avaiiable technology is a primaiy requirement for the RRS. For navigation and 
tude control, the system components available include inertial measurement units (IMUs) 
sensors (stellar, earth and sun), magnetic detectors, and GPS receiver sets. 

Limitations placed on the RRS by its various functional requirements drive the selection of 

attimd H S ‘ em C ° mPOne " tS ' ThC requiremem to °P eraK “ ««y random orientation requires 
attitude and navigation determination components to be either an IMU, magnetic, or GPS 

eliminating the use of stellar. Eanh, and Sun sensors as navigation sources. During reentiy’ 

operations, the only system types tiia, are capable of providing support are the inertial type during 

renofire, and reentry with GPS available during reentry. During landing operations, the IMU 

RRS ON T X '' T CmaUbeaxd '° -«l"tad landing accuracy. Since tire 

available throughout the mission, random orientation causes component 

n ° re un nt, utilizing a combination of either stellar, magnetic, or GPS to perform 
navigation and attitude determination. 

Because of functional requirements, available technology, and mission limitations, the RRS 

,1m S “ T “ SyMrgIStiC and redunda ”' made up of a variety of components 
that can provide the availability and random orientation perfoimance in orfer to fulfill die RRS 
system requirements. 

The RRS GNC design accommodates all phases and modes of operation. Following 

a ;: C h : d ■“ 0pera,ions <"*>» 6 5 - 8 ). «■ Of basic GPS position determination 
capabtiny enables immediate determination of position and velocity. Since the GPS receivers will 

be operated dunng launch, this information could also be provided to the launch vehicle, if desired 
Amitiier advantage of having GPS operetion during launch is tire ability to immediately determine 


6.6-13 



vehicle attitude in any random orientation. This also allows 
orientation of the RRS to a preferable thermal condition. 


rapid insertion error correction and 





* BAS,C GPS CAPABILITY ENABLES IMMEDIATE 

determination of position and VELOCITY 
FOLLOWING INSERTION: VEL °CITY 

- GPS Receivers on During Launch 


- Data Could Be Provided to Launch Vehicle 



• VEHICLE ATTITUDE CAN BE IMMEDIATELY 

SST RAND0M 0RIENTAT,0N 


- Insertion Error Correction 

- Onentation to Preferable Power and Thermal Conditions 


Figure 6.6-8. GNC Launch Phase 


6 « GN ^ provides su PP or t for all modes of required on-orbit operations (Table 

dlment U fT T * * ^ extension °~s will consist of a GPS 

" “ ndCT COna ° 1 ° f *“ *Pi".up will be controlled by 

control r GPS ^ “ Si " 8 Um,SterS - Alth °“ 8h " 0m,ai will be under IMU 

“ ™ on GP c ,r e ‘ Ve H Pr0Vid ' ’ Perf ° nnanCe Ch “ k “* -agency backup. In 

J, ° C P “ l ' ,Cr “ al Upda,,: ' and orbit determination for 

ecovery planning. Sput down operations will also be under IMU condol using the thrusters. Tri- 

mas retraction will be performed with attitude control provided by the IMU. A final precision 
inertial alignment will be performed with GPS prior to reentry operadons. Finally orbital 
adjustments will be made under IMU control with GPS utilized for orbital determination. ’ 


6 . 6-14 


Table 6.6-3. GNC On-Orbit Operations 


• EXTENSION OPERATIONS 

- GPS Alignment; I MU Control 

• VEHICLE SPIN UP 

- IMU Control Using Thrusters 

• NORMAL OPERATIONS 

- IMU Control 

- GPS Provides 

- Performance Check and Emergency Backup 

- Inertial Update and Pre-Despin Alignment 

- Orbit Determination for Recovery Planning 

• SPIN DOWN 

- IMU Control 

• CONTRACTION 

- Final Precision Inertial Alignment With GPS 

- IMU Control 

• ORBITAL ADJUST 

- IMU Control 

- GPS Orbit Determination 

Although the use of GPS during reentry and recovery operations provides multiple 
advantages, its implementation is constrained by potential interference of the retrofire with the GPS 
RF signal. This prevents use of GPS during this bum, even though it is more accurate than the 
IMU for the long bums needed for low G reentries. The solution to this dichotomy is to first align 
the IMU using GPS prior to retrofiring. Then, the IMU will be used for positive control during the 
retrofire bum. After the retrofire bum, GPS will be used to determine position and velocity 
information, while the IMU will control any corrections that may be required. During the landing 
phase, the basic 16-meter Spherical Error Probable (SEP) GPS accuracies can provide autonomous 
control to ensure adequate safety margins at any location on earth. DGPS operations will provide 
submeter precision landing capability at a GPS-surveyed position. 

The GNC is central to the overall RRS architecture (Figure 6.6-9). The dual computers, 
one in each module, provide for independent operation of each module and the level of redundancy 
required for a fail operational system. All external communication is via the Deployed Module 
GNC computer. All communication within the RRS is via data bus within and between modules. 
The GNC design is priority driven (Figure 6.6-10) with safety being the most critical considera- 
tion. The attitude control configuration (Figure 6.6-11) is composed of an array of components, 
each with its own unique contribution (Table 6.6-4) to the overall mission. Conceptually and 
functionally, the control system consists of three parts: 

a. Attitude determination. 

b. Attitude control. 

c. Reentry control. 
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Figure 6.6-9. Architecture 


PROPULSION 

CONTROL 


ATTITUDE 

CONTROL 


SUBSYSTEM DATA 

CONTROL HANDLING 


- PUBLIC SAFETY - 


Control Alignment 
Propulsion Control 
Reentry Orientation 


V 


EHICLE SAFETY 

Vehicle Attitude Control 
Structure Dynamics 

Mast Extension/Retraction 
Spin-up and Stabilization Control 
Thermal Balance 


Power Load Shed Control 
Parachute Operations 


MISSION SUCCESS 

Subsystem/Payload Command and Control 
Data Handling/Storage and Telemetry 


Figure 6.6-10. GNC Design Priorities 
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Table 6.6-4. GNC Functional Allocation 


EACH COMPONENT OF THE 

GNC HAS A UNIQUE 

APPLICATION 

Component 

Uniaue Use 

Attitude Contml 

Other Use 



IMU 

GPS 

Deorbit Bum Control 
3D Location 

AG Control 

Launch, Structure and P/L 
Environment TLM 

Orientation Independent 

Launch and Structure 


IMU Onorbit Calib. 

Attitude Determination. 

Telemetry 


Main Bum Assessment 

Closed Mode Operations 

Magnetometer 

Low Power Attitude 
Determination 

Low Power Attitude 
Determination 

Location Assessment 

Torcjuerods 

Ug Attitude Control 

|iG Attitude Control 


Scanwheels 

AG Axial Inertia 

Rotating Attitude 
Determination 


Attitude Thrusters 

Control Authority 
(Deorbit Bum; AG) 

AG Vehicle Control 



6.6.4. 1.1 Attitude Determination. The attitude determination portion of the RRS GNC 
contains three elements: magnetometers, scanwheel horizon crossing sensors, and GPS receiver. 


The magnetometer is a two-axis flux gate instrument that provides magnetic field 
measurements for two spacecraft axes over the range of ± 1 gauss. These magnetometers provide 
the magnetic field vector to the flight computer, which then compares this to a stored reference 

magnetic field vector database to determine position of the vehicle. This process is fairly slow, and 
takes several orbits to accomplish. 

The Scanwheel is a momentum/reaction wheel with an integral high accuracy Horizon 
Crossing Indicator (HC1). The wheel provides angular momentum, while the HCI obtains precise 
atutude information. These scanwheels provide Yaw, Pitch and Roll Angles to the flight computer 
m order to determine vehicle orientation. This process results in accuracies in the order of 0.5 
degrees, and is subject to restrictions of vehicle orientation. 

The GPS receiver set also provides Yaw, Pitch and Roll Angles, and accurate navigadon 
tnfoimauon to the flight computer. The accuracy obtainable fiom the use of GPS is significantly 
better than that available fiom the other GNC components. 
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«.<U. .2 Attitude Control. CNC attitude control is maintained by the Kalman Filter and 

control algomhms that reside in the RRS Vehicle Computer. Atdtnde determination informadon 

batneo I by the magnetometers, scanwheels, and GPS receiver is coordinated with the Kalman 

. ter and used to update the bias factors of the IMU. Vehicle attitude is then controlled by use of a 

com matron of TORQRODs, momentum reaction wheels, and thrusters contained in the RRS 
propulsion system. 


The TORQROD is an electromagnet consisting of a magnetic core and two coils, each of 
whtch provides a dipole moment of 350 Am?. Current flowing through the coil generates a dipole 
moment capable of interacting with an external magnetic field to produce a torque. 


The basic approach of using GPS to provide attitude control is technically justified Basic 
location information is obtained from the GPS code information. This technique of deteimining 
on-orbit position has been flight proven on LANDS AT. The precision location will be obtained by 
tracking die GPS earner phase. The feasibility of performing this technique has been demonstrated 
on m aucraft (Figure 6.6-12). This experimental data was obtained from a recently completed 
ASA study program where precise aircraft azimuth (yaw) determination via GPS earner phase 
measurements was demonstrated through post-flight analysis of experimental data. The results of 
is study clearly indicate that the pointing accuracies required for RRS (the horizontal lines) are 
achievable via the earner phase technique. The two key issues that must be resolved for successful 
satelhte use, how to perform on-orbit initialization and how to handle the potential cycle slips have 

sevml possible solutions that are currently being investigated by several studies including an 
SAIC internal IR&D program. 


The development of a process for initialization and phase cycle slips identification was 
initiated, in parallel with the analyses, to ensure consistency between subsystem requirements and 
current technology performance, and is being followed by the development of the initialization/ 
identification process. The primiuy difficulty is that, unlike the standard GPS operation in which 
the pseudo-random code lock ensures knowledge of position within the modulation stream, the 
earner phase contains no unique identifying features that allow discrimination among phase cycles. 

Since the incident RF carrier from a given satellite will arrive at the RRS antennas at 
different times, the relation among tile observed cycles must be established. Initialization (the 
process of determining which received cycles from a panicular carrier correspond to each other) is 
performed by knowing the geometiy of the satellite/space vehicle/antennas, and being able to 
calculate the time it takes for the incident wave to travel from one antenna to another. 
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Figure 6.6-12. GPS-Based Altitude Control Feasibility 
Cycle slips, which occur wh nh fl i 

First, they must be immediately identihed to precede 030161 ** l0St ’ **** tW ° problems - 
magnitude of the slip must be determined for re-iniri r • ^ degradation > an ^ second, the 

cycle slip is a function of the processing capability and the phasJ^^ following a 

simulation required to ' he RRS S “ bsysKm mod e' and digital 

perfonnance will then 1* evaluated using the simula^Th^"^' ^ 
system performance under random orientation conrf ti !“ bsys ‘ em 10 det e™ne Hie probable 

“ y ~ 10 *■•*— •» -tual JZ WU ' h 

• 1 e VebL R a^rWcrure?GP^rI “- ,4) “ maintai "« i 

10 retroftnng. Active control is provided via the * ' * “* S “ d rc ' minaJi “ *e IMU prior 

Process. Following retrorocket firing the IMU is a ,■ * * Compu,er du ™>g the retroftre 
second correcting retrofit* is necessary i, wil , then ^ “ Sing ‘ he GPS re “tver. If a 
operating modes is prevalent throughout the GNC de • T ndanCy of the hardware and 
the magnetometers can provide a similar, 

albett degraded, capability. GPS receivers and 
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scanwheels are also similarly redundant in attitude determination capabilities. Tridundant units are 
also provided for the Vehicle Computer, IMU, Momentum Wheels, and GPS receiver equipment. 
This redundancy of equipment and operating modes will ensure an RRS GNC subsystem with 
very high reliability. 

The sensor geometry of the RRS GNC is shown in Figure 6.6-15. The two principal 
sensor systems are the GPS receiver antennas and the scanwheels. In the microgravity mode, the 
magnetometer will provide primary control with the GPS set performing initialization and backup. 
The key consideration in the use of the scanwheels is that the tri-mast needs to be extended only 
about 5 feet to allow for use of the maximum possible scanwheel field of view. 

In the artificial gravity mode, the scanwheels will provide the primary attitude determination 
data with GPS initialization and all orientation backup. 

During the reentry and recovery operations, GPS will also be available to provide the 
precise field of view necessary to obtain very accurate attitude and navigation information. 

A performance summary of the RRS GNC subsystem is contained in Table 6.6-5. The 
redundant nature of the RRS GNC architecture is clearly demonstrated in the attitude knowledge 
category. The MADS provides a reasonable amount of accuracy while GPS provides precision 
accuracy capability. 

6.6.4.1.4 Precision Location and Attitude Information. The specific technique that 
will be used to provide precision location and attitude information is the use of differential GPS. 
Basic location information will be obtained using the GPS code information, and precision location 
will be obtained by tracking the carrier phase using advanced GPS receiver technology. Attitude 
determination will be performed using 3 5-channel receivers connected to 2 sets of antenna. These 
microstrip antennas will be mounted on the Deployed Module and have a one meter baseline 
between each leg. Recent testing by Texas Instruments (Figure 6.6-7) of their advanced GPS 
receivers has demonstrated a 0.1° accuracy, and TI expects this performance to increase to 0.05° 
when used with a matched antenna. The specific attitude determination technique to be used 
involves measuring the differences in phase caused by a change in attitude of the host platform. 
The phase shift induced by vehicle motion allows the new baseline coordinates to be solved and 
instantaneous attitude to be computed. The principal difficulty that must be handled with this 
approach is the detection of cycle slips and the method of re-initialization of the phase lock 
accuracy following such a cycle slip. 
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Figure 6.6-15. Attitude Control Sensor Geometry 



Table 6.6-5. GNC Performance Summary 




Altitude 

Knowledge** 


Attitude Control 


MADS 

GPS** 

MADS 

Case 

Roll 

(deg) 

Pitch 

(deg) 

Yaw 

(deg) 


AIK Axes 

Extended 

Pitch/Yaw 

Roll 

(deg) 

Pitch 

(deg) 

Yaw 

(deg) 

GG Stable 

0.4 

0.9 

1.0* 




0.1 

0.1 

0.5 









(0.3)+ 

(1.2)+ 

Yaw Spin 

0.4 

0.9 

1.0* 


0.05 

0.01 

0.2 

0.2 

- 

Spin Stable 

0.2 

0.2 

0.5 




0.1 

0.1 

0.3 


* Improved MADS 3-sigma accuracy 
** Absolute knowledge of control ordinates 
+ Attitude bias (drag and solar pressure) of control ordinates 
*+ Currently demonstrated to be -0.1 with 1 meter baseline 


A graphical representation of the typical performance of the GPS system for an RRS 
mission is presented in Figure 6.6-4. These four plots depict DOP versus time for several latitude/ 
longitude combinations. The DOP value is an indication of location potential for a given set of 
geometries as a function of time for specific conditions. The advertised GPS accuracies are based 
on a DOP = 6, so actual performance of the RRS will be substantially better than the advertised 
15m SEP as the DOP <, 2 for these examples. Even the example for the 6-channel receiver 
consistendy has a DOP of less than 6 despite brief periods where it blows up to 10 or more. 

The spin-stabilized mode will be achieved through use of the propulsion subsystem 
thrusters controlled by the IMU. First, the spin axis will be oriented using magnetometers and 
TORQRODs. Then, spin-up and subsequent de-spin will be achieved using the thrusters. Reentry 
support will consist of vehicle alignment using GPS, scanwheels, and TORQRODs prior to 
retrofiring. 

ITHACO, Inc. has performed analyses (Appendix E) of the performance of the RRS GNC 
subsystem during all operational modes. The satellite configuration used in these analyses is 
shown in Figure 6.6-16. Worst-case disturbance torques induced on the extended RRS 
configuration by solar pressure and atmospheric drag are presented in Figure 6.6-17. This worst 
case environment is for a 350 km, 33.83° inclination, circular orbit that has the largest atmospheric 
and smallest magnetic performance of all of the RRS design reference missions. The following 
analysis results represent these worst case environmental conditions. 
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X (Roll) 



Iz = 790 Kg-m 2 I z = 469 Kg-m 2 

ITHACD 

Figure 6.6-16. Satellite Configuration 

The RRS GNC configuration, in the microgravity mode, is presented in Figure 6.6-18. In 
the three-axis gravity gradient stabilized mode, attitude data is provided via Kalman filtering of 
GPS and three-axis magnetometer data. Active attitude control is provided by the three 
TORQRODs. 

The RRS GNC configuration in the microgravity mode, with a thermal balance rotation, is 
presented in Figure 6.6-19. As in the three-axis gravity-gradient stabilized mode, attitude data is 
provided via Kalman filtering of GPS and three-axis magnetometer data, and active attitude control 
is provided by the three TORQRODs. The additional Yaw rotation is provided by the momentum 
wheel. 


The RRS GNC configuration in the artificial gravity mode is presented in Figure 6.6-20. 
Roll and pitch attitude data is provided via processing of GPS and Earth horizon crossing data. 
This is necessary because the magnetometer is insufficiently responsive to support this mode. 
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Worst Case Disturbance Torque Profiles For Extended Configuration 
- Circular Orbit 
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Figure 6.6-17. Disturbance Environment 





ATTITUDE CONTROL 



6.6-28 







ATTITUDE CONTROL 



6.6-29 







ATTITUDE CONTROL 



6.6-30 


Figure 6.6-20. RRS GNC Configuration Artificial Gravity 







Spin-up and de-spin operations will be performed via thrusters. In addition, the thrusters will 
provide the active control required during the spin operations. 

The RRS GNC will be responsible for performing all vehicle major maneuvers including 
spin-up for artificial gravity, de-orbit bum, and orbital adjustment. Prior to maneuvering, an IMU 
alignment (Figure 6.6-21) will be performed using GPS and scanwheels. Once aligned, the IMU, 
in conjunction with the pulse modulated thrusters (Figure 6.6-22), will control vehicle attitude and 
velocity vector. The performance required during these major maneuver operations are an angular 

accuracy of > 0.1°, an acceleration of > 0.10 |iG, and a velocity error < 0.25 FPS for a 250 second 
burn. 


The results of the ITHACO analysis are shown graphically in Figures 6.6-23 through 
6.6-26. Figure 6.6-23 depicts typical system performance in the gravity gradient stabilized mode 
with a yaw rotation. The 1.5 g spin stabilized mode, shown in Figure 6.6-24, has a steady state 
pitch rate of -1 rad/sec within one orbit The three-axis gravity gradient stabilized mode is shown 
m Figures 6.6-25 and 6.6-26. These figures arc for an initial tip-off condition of 6°/axis with zero 
rate. Figure 6.6-26 clearly shows that the steady state pitch and yaw values each have an offset 
value associated with them. The pitch offset is due to an atmospheric drag bias, while the yaw 
offset is due to a solar pressure bias. 


In summary, the RRS GNC design concept is composed of proven techniques and utilizes 
existing hardware. The design accommodates all phases and modes of operation from launch 
through recovery. Advanced GPS receiver technology will be utilized to provide precision attitude 
determination. SAIC is currently developing these techniques through an internally funded IR&D 
effort. The performance of the RRS GNC subsystem has been thoroughly modelled, and all 
required operational modes and requirements are achievable with our current design concept. 

6.6.4.2 Equipment Summary 

6.6.4.2.1 Scanwheels. The "Scanwheel" (Figure 6.6-27) is an ITHACO integration of two 
space-proven components, the momentum wheel and the IR horizon sensor. This sensor config- 
uration was picked because of its unique dual function applicability to the RRS artificial gravity 
operation. The two functions are: 1) the establishment of the RRS orbit plane as the vehicle’s 
preferential spin plane and 2) the ability to provide earth scan data throughout the 360 degrees of 
RRS rotation. These objectives are achieved by mounting the dual Scanwheels with their spin axis 
perpendicular to the long (extended) axis of the RRS (Figure 6.6-15). The Scanwheel momentum, 
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Figure 6.6-23. Gravity Gradient Stabilized Mode With Yaw Rotation 
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Figure 6.6-24. Spin Stabilized Mode - 1.5 G 
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Figure 6.6-25. Three-Axis Gravity Gradient Stabilized - Typical Capture Performance 
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Figure 6.6-26. Three- Axis Gravity Gradient Stabilized - Typical Steady-State Performance 
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Figure 6.6-27. GNC Artificial Gravity Control - Ithaco Scanwheels 



combined with the inertial properties of the extended RRS, then results in a preferential spin plane 
that contains the RRS's extended axis and is perpendicular to the Scan wheel spin axis. This places 
the Scanwheel's field-of-view perpendicular to the RRS spin plane (Figure 6.6-28), allowing earth 
crossing data to be obtained through the entire 360 degrees of sensor and vehicle rotation. This 
provides continuous orientation of the RRS spin plane relative to the earth and the position of the 
earth within the Scanwheel scan provides rotational data (position and rate) on the RRS operations. 
The 360-degree Scanwheel coverage is achieved by clocking the Scanwheel installation so that the 
"blanked regions" of the "hot redundant" wheels do not overlap. The "hot redundancy" approach is 
taken to ensure vehicle control is maintained even with a single failure. 

6.6.4.2.2 GPS Antennas/Receivers. The proposed GPS antenna configuration is based 
upon the performance achieved by TI (Figures 6.6-6 and 6.6-7) using a microstrip/chokering 
antenna and a more detailed analysis of a similar choke ring configuration (Figures 6.6-29 and 
6.6-30) done by the Ball Communications Systems Division. The current RRS configuration has a 
total of six microstrip antenna, two mounted (stacked) on top of each tri-mast storage container, 
that have a reflection free field of view, limiting any performance degradation to multipath from the 
vehicle structure. Furthermore, since the vehicle structure lays in the antenna null, vehicle 
reflections should not cause problems. However, a mockup test should be done early in the 
vehicle development cycle to validate the multipath conditions. A single antenna with a power 
splitter may be a better option and further performance/reliability analysis is required to complete 
this tradeoff consideration. 

The TI AN/PSN-9 dual-port configuration (Figure 6.6-5) is uniquely applicable to the RRS 
application. In this configuration, each receiver has two antenna, one for each port Each pair of 
antenna establishes a vector, allowing any two of the three receiver/antenna sets to provide vehicle 
attitude. The result is a single GPS configuration that is redundant for attitude determination and 
tridundant for fail operational use. The AN/PSN-9's 100-foot remote antenna capability allows the 
GNC to determine the relative Main/Deployed module position by using a remote antenna on the 
Main Module. This provides an independent assessment of the tri-mast performance for perform- 
ance analysis without any significant increase in cost/complexity. More specifically, the GPS 
application involves: 

a. Orbit Control. 

1 . There are three factors associated with orbit control — position, attitude, and time. 
It is widely known that GPS provides extremely accurate determinations of 
position and time, but GPS can also assist with attitude control. Using the method 
of carrier tracking, GPS can provide data accuracy, in centimeters, at a frequency 
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SCANWHEEL BLANKING OFFSET 90 DEGREES TO PROVIDE 
MEASUREMENT THROUGHOUT THE FULL ROTATION 
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Figure 6.6-28. GPS/Scanwheel Sensor Geometry 
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Figure 6.6-29. Anticipated GPS Antenna Performance - Ball Communications Systems Division Antenna 






of 1.5 GHz. This is much more desirable than C/A-and P-code tracking at 1 MHz 
and 10 MHz (respectively) with accuracies of 16-100 meters. 

2. One problem with this type of control is that of cycle slips — changes in carrier 
phase ambiguity by an integer number of cycles. The difficulty with cycle slips is 
in detecting them and determining the number of cycles slipped to reestablish the 
baseline. If the cycle slip is not detected, the position data computed after the 
epoch of the cycle slip are incorrect. There are two ways to decrease the 
percentages of cycle slip occurrence. If GPS receivers are placed on the RRS 
vehicle (RRV) at a separation of less than the carrier phase wavelength of 19 cm, 
the chances of cycle slip are greatly reduced. The second method is by redundant 
receivers — one receiver can instantaneously reestablish the baseline if the other 
detects a slip. 

3. Two of three GPS receivers can be placed on the RRV service module and the 
payload module to provide this orbit control. Receivers on both modules will 
provide reliability and precise attitude control during operations when the 
Astromasts are extended. GPS information received during extended operations 
can assist in controlling the rotation, since exact locations of both ends of the RRV 
can be monitored. 

b. Reentry Control. 

1 . The second type of control is reentry control. There are three requirements for 
reentry control - thrust vector, time of firing, and change in velocity (or final 
velocity). Redundant systems are required for control and propulsion (multiple 
thrusters). With GPS, the time of firing requirement becomes one of position. 
Using GPS data, firing can be executed at a precise location rather than at a 
predetermined time. In addition, the effective thrust vector can be known at any 
time, and if one thruster fails, corrections can be made within minutes for the next 
firing. Similar adjustments can be made for velocity. Intermediate velocities can 
be obtained to compute new changes in velocity (or final velocity) to correct for the 
next firing. 

2. There are three areas of error in reentry control - the de-orbit phase, reentry, and 
terminal landing. Errors in the de-orbit phase due to propulsion can be effectively 
eliminated using information received from GPS. Reentry errors caused by 
atmospheric effects cannot be addressed, but the wind effects during terminal 
landing can be controlled with GPS. 

c. Landing Control. 

1 . The RRV will utilize parasails for landing control. With GPS information, wind 
effects can be determined and corrective measures taken. The relative wind 
velocity can be continuously computed during descent by comparing the parasail 
controls needed with those baselined for the case of still air. Again, corrections 
can be made at any time based cm the information received. 

2 . Another landing issue is that of recovery. With a GPS receiver on board, the RRV 
can broadcast its exact location to the GPS satellites - a location that can then be 
received by any recovery vehicle. That rescue vehicle can then target to the RRV's 
precise location for recovery. This also eliminates the need for any ground support 
at the landing site, which reduces the number of required personnel, and allows for 
changing the landing site at any time for emergency situations. 
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6.6.4.2.3 Inertial Measurements Unit. The Inertial Measurements Unit (IMU) proposed 
for use in the RRS is the Honeywell GG1320 ring laser gyro assembly (RLGA) (Figures 6.6-31, 
6.6-32 and 6.6-33). This RLGA was specifically designed for use with the S5 SANDAC 
computer which was chosen for the RRS. 

6.6.4.2.4 Magnetic Control. The stringent 10" 5 g microgravity specification requires 
essentially a free flyer mode. However, to ensure the vehicle stays in the thermal preferable 
orientation, a means of low-level long-duration control forces, unachievable with the low-level 
thrusters, must be provided. Therefore, the GNC includes the space-proven ITHACO magneto- 
meter/TORQUEROD combination (Figure 6.6-34) for microgravity operations. The currently 
analog design is expected to be available in digital form for RRS use, allowing full electronic 
integration with the other elements of the GNC. However, the system can use the current system 
"as is," minimizing any risk from the completion of the development of the digital version. Since 
the thermal control for many orbits is best achieved with a slight rotation about the RRS's extended 
axis, a momentum wheel has been included to cancel the angular momentum of the overall vehicle. 
Furthermore, since these wheels are mounted at right angles to the Scanwheels, the combined 
wheels have the ability to cancel the angular momentum that may be caused by rotating assemblies 
internal to the Payload Module. 

6.6.4.2.5 Flight Processor. The core element of the GNC subsystem is the flight computer. 
Unlike most satellites, the RRV has GNC and propulsion computational requirements involving 
continuous critical timing constraints that influence both vehicle and public safety. This requires a 
computer system that can function in what is known as a "hard real-time" environment. 
Furthermore, a fast, multi-tasking operating system (OS) and the ability for "real-time" debugging 
are required for efficient operation and low rick software development in such an environment. 

The wide range of computers considered varied from the "space qualified" version of the 
VAX to proprietary advanced processor concepts scheduled for space qualification in time for RRV 
use. However, the need for a real-time multi-processing environment which could handle both 
multiple tasking and multi-parallel processing of a single task (for failure identification) eliminated 
most of the processors considered. Ultimately, the choice became one of proven hardware/OS vice 
a "probable" new system, and program risk dictated use of a proven system - the SANDAC V. 
Furthermore, the SANDAC is tailored for executing strap-down navigation/control algorithms very 
similar to those needed for the RRV, and has been successfully used for inertial navigation and 
attitude reference control on numerous reentry vehicle flights. The following discussion is a 
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• Inertial or strapdown sensing of angular rate and acceleration 
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Figure 6.6-32. RLGA Sensor Configurati 
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Figure 6.6-33. RLGA Performance 
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develops of the SANDAC have techniques for ensuring hardness in the RRS space and descent 
cnv ronntent. Basically, natural radiadon hazards can be circutnvented by 1) providing " 
shielding (such as by wrapping in quarter-inch aluminum or tantalum layers, since the whole 

“ r T‘"' S ” " 8htW ' igh ‘' 2) e P i ' ,axial ^"8 of the associated chips (available now 

tor the S5 and likely within two vears for fh«» j„ , 

J IWO years tor the ES5 drop-in replacement processor) and 3) other 

successfully m ANDA ? 0 T r ' ^ b ° th t " e S5 “ d eXpenme " aJ ES5 P«*. been down 
successfully m space as well as aboard controlling boosters and reentry vehicles. 

Although the RRS processing considerations largely involve memory and harness as 

:“ A r g “' C a COn$idenng “ Si " 8 * ES5 “"juration of the SANDAC i„Ld 
bv Mot “* 2 ' b " P rocessors < us, "8. respectively, the 68040 and 68020 chips 

otti“ tr TvoT 3 feW 0the ? ey WOrth F ” » E « -as 

optional 10- or 28-volt power supply provisions and ability be powered off to save energv 

When powered off, the 68040 is "awakened" by tire companion 68020 processor module that's 
used to control the data traffic of the I/O module. 

6.6.4.2.5.1 System Architecture. The SANDAP v .,<.«* , . 

j . dAiNUAL, V uses a modular architecture that 

expandable in processors, I/O pom, and the amount of memory, to provide for flexibility The 
variability of multiple processors permits a „ application to be divided into logically independent 

o a ‘ r ** d,SmbUttd amol,g "* Processors. This division of activities creates potential 
execution overlaps that tmprove performance and help meet critical timing constraints. 

i„ * S : e “ bedded COm P uter - SANDAC V typically performs without direct human 
interaction through keyboards and display devices. However, terminal access to SANDAC V is 

required for software development. This access is provided by the "Gateway" a portable 
computer that operates under MS-DOS and has terminal-emulation capabilities. The Gateway also 
provides the means for transfer of the application code from tire host to the targe^Im and 

“ \TJ fOT deb “ 8 ^ "” S ' dcb “ g operations are su portedTy'e 

GATAR and Hawkeye software packages developed specifically for tire SANDAC V system Both 

packages are loaded and run on the Gateway. GATAR loads, activates, and monitors programs 
real controls the targe, system for machine-level debugging. Hawkeye monitors and coLTthe 
Hawk operating system while an application code is running. 

The target s >’ s,em ' dur f°8 software checkout, is a SANDAC V with the same hardware 
lgtirabon required for the actual application. This permits real-time testing of application 
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programs. During software development, a user's chassis provides power and isolates and buffers 
the serial channel between the Gateway and the target. 

Hardware Configuration A typical SANDAC V system configuration is 
global (UdmvpT 6 6 35 S h S T propagati ° n delays Umit ,bc SANDAC V to a maximum of 20 

«—* «o, » 

A local bus is a parallel bus with 32 dam lines, associated with a given Processor Module 

th “ MO, ° ro,a MC6802 ° »ni. (MPU) with access to dedica-' 

! y ” TOresources - The Cateway communicates wtth SANDAC V via a third bus (the 
g obal senal bus) that connects all Processor Modules to an external port on the Utility Module 
Tire constderanons in Table 6.7-6 restrict the arehitecmre for any given system configure 

that on wT SANDAC Vm0dU ' C iS 3 primed circuit ^ framed with aluminum mils keyed so 
that only one or.entat.on ,s possible when interconnecting the modules. Groups of modules are 

interconnected by rows of pins and sockets on the cireui, boards. Rows of pins and socket o' 

wo outer edges of the modules provide the global bus between all system modules. A second set 

p s and sockets on the processor and expansion modules provides the local expansion bus. 

Proc A ‘ he eXpanSi0n modules must ■* lo the component side of the host 

ftocessor Module, the expansion modules can be placed in any order on the expansion bus, and a 

Procesror Module and tts associated expansion modules can be placed anywhere in a SANDAC V 

or e ecmcal continuity, expansion modules pass the global bus signals through, but do not 

any * SignalS ' °"“ a « -> f ^ules is interconnected, the se, is assembled 
tetween two end plates. An assembled SANDAC V, and the physical arrangement and 
interconnection scheme, is shown in Figure 6.7-36. 

computed ™ a ‘ CWay may ■* “ IBM PC ' XT ' M AT ' “ r any oompletely IBM-compatible 

bv . e L?:r; Kr t at ieast ° ne mK ' bya * 

y of memory, and a senal communications port configured as port 1 [COM 1 :]. MS-DOS/PC- 
DOS, versons 2. 1 through 3.2, must be installed. Hawkeye functions with either a monochrome 
or a color mention the color monitor requires a color graphics monitor controller. 

a nnm J yP f iCa " y ’ ^ AC V applicarions must rcs P°" d in real time to external events and handle 
number of operations concurrently, ft, developing an application that meets these requirements, a 
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Figure 6.6-35. SANDAC V Architecture 
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Table 6.6-6. System Configuration Considerations 

One Utility Module, per system, providing: 

- Power 

- Clocks 

Global Serial Bus Interface 

- Global Resources 

- 256K Bytes of EPROM 

- 128K Bytes of RAM 

- 32-bit Timer 

— Status Register 

' 5 MC6mfSI^f n ;S h WiUl “ MMOrola MC6M20 MR, 

ssr. ■xssssSz^sssz.- 

- 128K Bytes of RAM 
■ 1 /VSLI Gate Array 

1 512-Byte First-In-First-Out (FIFO) Buffer 

- 1 Motorola MC68901 Multi-Function Peripheral 

AftaessorM°dul e supports a maximum of four local bus 
modules in the quantity indicated: Dus 

- 1 System I/O Module 

- As many as 4 Expansion Memory Modules 
- — man y ” 4 MIL-STD-15553B Modules 


expansion 


multitasking approach may be necessary. For SANDAC V, 
considering a multitasking solution: 


several options are available when 


Assigning one task to a single Processor Module 
* Assigning multiple tasks to a single Processor Module 
Assigning multiple tasks to multiple Processor Modules 

v PtocelTZ ?' diViSi0n ’ eaCh “ k0fM *"** ■* with one SANDAC 

V ftocessor Module an tts corresponding local memory (RAM). 

fOT “ m “ lmaSkmg “ d solutions is 


a ase,r:.rrr~rr: r rr syaem ^ ° f a sandac v - 

may be duplicate dedicated to labonttoty use The Ids 7ZTv 

and also provides optical isolation for die Gateway-target serial comnnmicatondt^eL^^^ ^ 
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The specific hardware configuration of the target system SANDAf v v • ^ 

•he appUcadon. Specific characteristics of the SANDAC v!! ’ '**"*''* °" 

or me oANDAC V processor are provided in Table 6.6-7. 


Table 6.6-7. SANDAC V Features 



^asSe ^ ^ ^ ^ *- -*» « 

5 ^ sci impon ana v I tRM terminal emulation software Th*. . 

the target systems akn renni™ , . . . sottware - The Gateways interfacing with 

(J only a single serial port as well as GATAR HAWktjve 

rja^fi” 0 SUPP °" **- a iZ 
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Figure 6.6-37. Target System General Operation Sequence 

The Gateway is a portable computer of the IBM PC, or compatible, type that operates 
under MS-DOS to communicate with the Host and/or Target computer. To communicate with the 
host, the Gateway uses VTERM terminal emulation software to emulate a VT-100 display terminal. 
To communicate with the target system, the Gateway uses either the GATAR debugger or the 

Hawkeye debugger. The configuration (Table 6.6-8) of the Gateway depends upon the specific 
software development system. 





Figure 6.6-38. Typical Gateway Configuration 
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Table 66 - 8 - G ATEWAY Host-Target Interface 

[ The Gateway is typically used as follows." 

StS;Ac a f n ”' i,h “ K « 

• * ^e, syston. ^ CaKway ^ ^ ^ ^ 

SSSJSf! “‘‘““Gi'BwaysM interfacing ^ 
foUowutg features are required: 1 “ 2 bo! '' a <3*«*ay. and a targe, system,*! 

' • Harddisk 

• PCW^ *? ve or netw «rk link 

• RS-ISf ! n ^ ,nte 5 aceforthe host (MS-DOS COMM2) 

Ko 232 senaJ interface for the tara^f /mc rv^c _ ' 

• Terminal emulation software pXe fVTOM fn 

• Printer^rtf^ :deb “ S8er(MS - D0S ® H AWKEYEEXE) 

| When running: 

ralemal conneaS' "* comeaal Vla * Rs '232 serial channel to the SANDAC V Utility Module 

• Hawlceye, the RS-232 channel is connected to the System I/O Module s serial channel A 

c — - ~ - - 

• Monitoring the satellite operating environment/conditions 

• Executing the procedures for the satellite functions of 

Guidance, Navigation & Control (GNC) 

Telemetry, Tracking & Control (TT&C) 

Habitat / Experiment Data Handling (HEDH) 

bu, there are also ptovisij for grouTd ^"1“' " “““ herci "' 


6.6-57 


6.6.4.3.1 Mission 


•'■l Des,8n Scenarios Th « re are f.ve basic design scenarios to be used The 
parking orbits vary in altitude between 350 and 900 kilometera with inclinations between 28 5 and 
degrees. Launches are to be made from ETR or WTR pads (latter for 98") with selected WSMR 
or coastal" water recoveries (in ETR, WTR or Gulf regions f„, 28.5") either by soft-landing or 
air-pickup. The space habitat will be extensively varied between 0 and 1.5 g’s (see Attachment A 
or details). A reentry angle of roughly 3.5 to 4 degrees is planned for the RRS descent, 
eluding upon the DRM used in accordance with the g-load (<15) and hearing constraints. The 
RRS recovery dispersion is constrained to be <±6 and 30 kilometers for crossrange and 
downrange errors respectively. The RRS system is designed to be reusable within 60 days of 
turnaround rime for as many as 3 flights per year over 10 years of total refurbished system lifetime. 

6.6.4.3.1.2 Design Requirements. In addition to the main and secondary design require- 
ments that are specifically imposed by the customer. There are ceriain software requirements 
relating to the development/documentarion/review, as well as design pads (arbitrarily assumed 50% 
or the sizing and timing estimation) for uncertainty/growth provisions which must be considered 
However, there is not a mandated real-time language, and neither is fault tolerance directly 
emanded. Tentatively, SAIC has decided on using the "C" languages for implemented code. In 
addition, certain provisions will be made for fault tolerance to enhance mission perfoimance. 

cam ™ eC langUage wiU •» supplemented with assembly language routines as necessaiy. The 
AC operating system is written in C, as is much of the systems level software and 
apphcauons software to date. Ada has been considered since an Ada cross-compiler has been up 
and runrnng for over 2 years. However, because of the importance of life-cycle costs and the time- 
cnt.cal.ty of operating latencies, C is the better choice for both signal and data processing 
app cations. The use of C gives the programmers access at a low enough level to produce efficient 

code that is required for hard real-time applications, and yet, still be free of the details that are an 
inherent part of assembly language programming. 


The provisions for fault tolerance will include spotting/averting SEU susceptibility (by 
voting the results of redundant processois or by using memory checksums for bit drop), yet other 
forms of diagnostics, checking buffers, and statistical estimation filters for overload and impending 
m-observability respectively, bus/processor/memory redundancy, alternative logic paths, equip- 
ment cooling, occasional memory refreshing from more reliable storage facilities to avoid fault 
buildup, etc., will be implemented. 
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6,6.4,3.2 Processing Overview 


. .4.3.2. 1 Basic RRS Design Consideralions. The RRS spacecraft is comprised of 
two modules that are separated while in orbit in order to achieve the RRS scientific objectives The 
Main Module contains the Payload Module, the GNC equipment/logic, an IMU, and is encased in 
a nose cone with a passive heat shield. The Deployed Module contains the propulsion elements 
most of the TT&C elements, and passive provisions for thermal control, and an IMU and GPS 
receiver(s) / antennas used for both navigation and primary attitude determination. The variation in 
artificial gravity (centripetal acceleration) is achieved by spacecraft mtation at 0 to 10 tpm about its 
center of mass. The RRS configuration is axially symmetric with the moment of inertias 
approximately a factor of 4.23 larger about the two X and Y axes (associated with roll and pitch 
respectively) than that for the longitudinal Z axis (yaw) of the spacecraft when the masts are 
contracted, whereas the factor is approximately 821 when the masts are extended. The masts ate 
contracted before the attitude-critical de-orb,, maneuver is made. Relevant spacecraft dynamic and 
environmental considerations are provided in Table 6.6-9. 

RRS software development/perfonnance issues that must be considered include: 

Spacecraft flex effect on attitude estimation and control 
GPS attitude determination accuracy and filter convergence time 
• De-orbit targeting of atmospheric disturbances 


RRS software development guidelines include: 


Integrated GPS approach / rationale (navigation and attitude) 

Pseudo-targeting concepts for de-orbit simplicity / effectiveness 

De-orbit maneuver that controls impact position 
and reentry flight path angle 


^ lutions of EuIer Equations of 6DOF motion amenable if symmetrical 
orqued body (constants, per certain general axial circumstances) 

— rvt^cs t & amenable for pmurt,ing «“ « 

Artificial gravity 
Technology freeze date 
RRS system users 


The key assumptions made in the software analyses done for this study include: 

• Rigid body dynamics 

Idealized point-mass motion along conics with smart compensation for realistic modeling 
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Table 6.6-9. Satellite Dynamic/Environmental Considerations 

• Environment 

- gravitational oblateness 
aerodynamics (drag, climatology, winds) 

- solar radiation pressure 

• Dynamics 

ft* guidance, navigation, attitude determination 

- 6DOF for attitude control (concern of rigid body adequacy 
versus flexible body motion / ramifications) 

Sensors (associated concerns) 
clock (master identity, accuracy) 

* GPS receiver (number & type) 

GPS (number & type) & com antennas 

- interferometer (need?) 

- magnetometer 

- altimeter 

- beacon 

Measurements 

- time 

- altitude 

- TOA of RF signal 

- DTOA 

- LOS 

- magnetic flux 
Controls 

- main propulsive engine of booster 
■ de-orbit / retro engine 

vernier / attitude control thrusters 

- torque rods 

• reaction wheel 
heat shield 
chutes 

s/w pseudo controls 


6.6 4.3.2.2 Processing Funclions. The software design problem can be considered a 

multi-faceted process. The associated functions, in the modularized muld-processor context 
includes the distinct operations of: 


• GNC 

• TT&C 

• HEDH 
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«.«.4.3.2.3 Computers. The GNC process will be an entirely onboard processing operation 

(except for nav messages being refreshed), with total ground emulation and simulation capability in 
compatible ground computers. 

The software development, debug and execution environment is comprised of three 
separate computers-target, host and gateway. SAIC anticipates that the software development 
will be done in a VAX- 11/780 computer running the VMS operating system (the so-called "host" 
machine). Smce the embedded computer ("target" processor) chosen for onboard processing does 
trot ave provisions for user peripherals such as snazzy human-oriented displays and printout, the 
gateway computer to do these things is envisioned to be an IBM PC or a compatible version 
running on MS-DOS. Interaction between the the host and gateway computers is via a serial 
communications link. Code is written, compiled and linked on the host. The executable object 
code ts downloaded to the gateway and stored there on a disk file. A second gateway (serially 
connected to the target) is then used to download the executable code into the target. 

6.6A3.2.4 Algorithms. This section describes the baseline algorithmic schemes for RRS 
UNC, as well as other variants also under consideration. 


An integrated GPS approach has been adopted for both the conventional solution of the 
navigation problem and for the unconventional solution to the attitude determination problem 
Other considerations such as systematic noise rejection by using DTOAs, pre-filtering of random 
notse wild points, and an extremely simplified alternative to statistical filtering such as weighted 

averaging of correlated "bi-planar"estimates of body-cootdinates for the LOS with a priori or 
adaptive weights can be applied. 


Other algorithm considerations and design features are noteworthy. One is that for any 

RRS Parking orbi '' the lime-averaged variations in the semi-major axis (a) and 
eccentricity (e) over an orbital period are zero to first order in the first zonal harmonic term (L of 

the Earth's gravitational potential. Moreover, these are two orbital elements that uniquely represent 
the dominant terms (radial velocity _vr and tangential position _T) in the buildup of cireular orbit 

enora / uncettainties. Another consideration / feature is that similarly analytical expressions can be 
readily formulated for the penurbing influence of atmospheric drag and solar radiation pressure can 
also be used for the nearly constant orbital perturbation of gravitational oblateness as well as 
pettur attons due to other influences. This is germane, for example, when the satellite is not sunlit 
(occurring roughly one-third of the time) or when its frontal area to mass ratio varies significantly 
sue as during lengthy orientation maneuvers, or even if there are unequal aero and solar loads 
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because of flexible body dynamics. A third consideration/feature is that station-keeping which is 
conventionally done via corrective strategy such as 


• changing i with a small impulse at nodal crossing 

changing a and e with a tangential impulse at apsis (Hohmann transfer) 

• changing / with an assumably small impulse 90 degrees from node 

r ** aI,ernadvel >' P CTfo ™ al b ? sim P | y interrelating the variations in the orbital elements to the 
Frene, cootdinate variations (RTN frame) or even directly perforated solely on the basis of the 
renet variables. The last consideration / feature is that the orbits of the RRS DRMs have bounds 
on centra. "bitidelements (a and i) that are specified by NASA and by range safety considerations 
or an launches. In addition, there are other constraints, due to public safety concern 
and interface with other satellite constellations, that further restrict the choices of i and even 
somewhat l. The former entails reentry / approach flight cotridors say to WSMR that put a 
mintmal population at risk in case of malfunction. The latter entails using OPS or TDRSS for 
navigation / attitude functions and user / controller effectiveness respectively 


«.6.4 3J Operating System. The SANDAC V has an operating system kernel, known as 
Hawk, that provides an extremely fast set of primitives, or services to support the multitasking 
so utions needed for applications software that can take advantage of the unique real-time 
environment. Hawk also provides transparency to system details and supports performance 
measurement and debugging. Optimally, application programs are written using the C program- 
ming language, and requests for Hawk services are specified as C-language procedure calls. 


Hawk resides in global ROM, and at power-up, is replicated in each Processor Module's 

tocal RAM. Calls for Hawk services (Table 6.6-10) by a a given Processor Module are handled 

Hawk copy resident in local memory. If the service call involves anotiier Processor Module, the 

processing is done locally, and upon completion, the other module is notified via a hardware 
mechanism. 


With Hawk-supported multitasking, each task is assigned an initial priority. A dispatcher 
mechanism, which can be disabled if required, is used to schedule tasks using a highest-priority- 
first mechanism. Only tasks associated with a particular Processor Module are scheduled by its 
copy of Hawk. Hawk task states are shown in Figure 6.6-39. 
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Table 6.6-10. Hawk Services 

Hawk services support the following types of functions: 
* Task control 

- Tasking 

- Task Creation 

- Task Priority /Scheduling 
* Task Control Block 

Task States 

• Ready 

• Running 

• Wait 

• Suspended 

• Wait/Suspend 

• Intertask communication 

• Timer control 

• Memory allocation 

• Interrupt control 

• Window functions for the Hawkeye Debugger 


SYNC CONDITION TRUE 



Figure 6.6-39. Hawk Task Stale Diagram 
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When enabled, the scheduling activities of the dispatcher make Hawk an active component 
of the task over which the application has no control. When an application requires stringent 
control of the sequencing of an operation, the dispatcher can be disabled. 

The basic logical unit controlled by Hawk is the task. An application may consist of a 
single task or may be partitioned into multiple tasks. Multiple tasks can run on the same SANDAC 
V Processor Module or on separate modules. An application may be a single task or partitioned 
into multiple tasks which in turn may be run on a single or multiple Processor Modules. Multiple 
tasks run on a single module appear to execute concurrently since they are executed in an 
interleaved fashion by distributing processing time on a task priority basis. The task ID, 
established when the task is created, allows Hawk to ready tasks or to block them in a Wait state 
on a selective basis. The ID also lets tasks suspend other tasks or themselves. A dispatcher in the 
Processor Module's copy of Hawk automatically schedules tasks with the highest priority first and 
then executes the highest priority task. Tasks with the same priority are dispatched in a serial, 
rotating fashion. The dispatcher schedules only tasks associated with the local Processor Module; 
no global scheduling is provided. 

Hawk provides the ability to disable the automatic dispatcher since real-time situations may 
require a task to have complete control over the sequencing of operations. The ability to disable the 

dispatcher allows task-level control whereby a running task actually controls the sequencing of task 
execution. 


Since multiple tasks must be able to intercommunicate, the Hawk allows a message to be 
passed between tasks operating on the same Processor Module, between those operating on 
different Processor Modules, or across a communication channel to the Gateway or another 
SANDAC V. The destination for any communication involving separated tasks is referred to as a 
remote message queue, and a sender need know only the name of the queue to establish a link to it. 
A receiving task may interact with its queue in either a synchronous or an asynchronous manner. 
However, a receiving task must always take an active role in polling for receipt of messages since 
there is no way for a task to be interrupted asynchronously upon receipt of a message. Since 
"Real-time" applications require a precise way of determining the elapsed time of an operation as 
well as a predictable mechanism for the synchronization of tasks to absolute time, the Hawk 
services provide for elapsed time and for delay functions. 

6.6.4.3.4 Applications Development. SANDAC V application programs are developed, 
coded, and tested with an integrated software development system consisting of a host computer, a 
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Gateway, and a target SANDAC V. The GATAR fTahle riri inn-k 

Danel" tr» ^AMr>AP \/ .. ( lat>,e 66 ~ l deb ug program serves as a "front 

,and 1S USed for downloading executable files into SANDAC V memory and 
controlling all hardware features in addition to hardware/software debugging. GATAR also 
provides a simple interface between software and the program for opelig and del gg ,„ 

Hawkopera,ing ^ ° atar - y 

the SANDAC V may be turned on and exercised with no additional software. 


Uad binary data from Gateway files to target system memory 
Save binary data from target system memory to Gateway fil 7 
enfy the contents of target system memory with a Gateway file 

aS S^wif^GA^ Sta " ,la,ed -* -* — 

Execute all functions either manually via the keyboard or in batch mode 
Log all transactions to a disk file or printer m0de 

Enter and display parameters by symbolic name 
Extend the command set through operator-defined keyboard macros 
Duplay contents of target memory locati ons in an o^rator-specified .s creen format 
Reset a target system processor 

EMcule application code beginning at a given instroclion address 

.S gCt system , mernory> registers, and execution status 
£ 5 ?"*® c 9 ntents of individual target memory locations or registers 
A «/mh? Ck °a !f get system men,or y with a specified data pattern 

Assemble and disassemble 68020 and 688S1 instructions ilnarget system memory 


A user interacts with GATAR by entering commands on the Gateway keyboard 
Opoon y, this command input may be redirected to come from a prepared tew file on disk in an 
auto-execunon mode. From the keyboard commands, die Gateway constructs request packet Z 
are transmitted to die SANDAC V, mggenng die interrupts tha, are serviced by the GATAR 

p“ ” “T** the aCti0n required by *• — H ‘ra-snuts . response 
"a k “ G y>y- f nec cssary. Die Gateway dien processes the response packJTand 
formats a display on the Gateway screen. 


non ?! V hardware and W'i^o-a software interact with GATAR by means of 

traps A few of the processor’s software naps are dedicated to GATAR functions such as 
simulation of console input and output. Die rest, including processor exceptions, are handled by 
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default exception handlers 
exception handlers. 


in the GATAR firmware, but they 


may be reassigned to user-supplied 


. h a, ~ oi ** gatar — - - 

SANDAC V. When SANDAC V ^ lmpacl on a PP llc ation software running on 

- * can be ^ “ ° f ^ ““ 

a software-based debugger, i, necessarily disturbsXs^AC v' “TT' 1 1““ GATAR “ 
However, the SANDAC V processor tim> • lght y to observe its state, 

problems when houbleshool 27^ , T“ * ■» avoid 

no, active on the glol^ ” aPP,,Can0 " «» GATAR terming is 

« looai senal b us and no exceptions are being handled the GATAR firm 
no effect on die execution of application software. led , the GATAR firmware has 

GATAR can process console I/O from anv of th#» 1 ^ nncr , Li 

even though the Gamway is functionally anached l onlv PrOCeSSOrs “ * SANDAC V ' 

resident GATAR code maintains v ■ y one processor at a time. The SANDAC V 

processor using the global senal b ‘ nP “‘ a " d ^ ^ ^ processor - and * 

Gateway for all the processors. I„ * ““ ft ° m * 

processor to codec, messages to and ftom ^ZZ V 


The software development system (Figure 6 fi-am a 
and the Gateway via a serial enmm • • ) provides interaction between the host 

v"Z t ■ - - » *-£ ... ,.t 

AC V * ^ host computer is a mainframe (i e a VAX l imm . • . • 

ware development tools (Tables 6 6-12 anrt * ^ equipped Wlth a ** of soft- 

6888, coprocessor environment. ^ “* * “C V 68020 processor/ 


source t^^Tt,!!^ OT — * 'anguage 

within the host file system Software He 1 LSE for a VAX- 1 1/780) and stored 

able machine code. '°°' S execut- 

btgure 6.6-41 ts a flow dtagram tllustrating Urn sofnvam creation proccss . 
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| UTimuniiiimiw r mmmiunmur gf j 


SOFTWARE LAB 


HOST COMPUTER 
VAX 1 1/780) 


1st GATEWAY 
COMPUTER 
(• g IBM PC) 



COMM 

LINK 


* AU SYSTEMS CAN 
BE CO LOCATED AND 
CONNECTED BY 
COMMUNICATIONS LINK. 
OBVIATING NEEO FOR 
2nd GATEWAY COMPUTER 


ELECTRICAL 
OR PHYSICAL 
DISK-TO-DISK 
DATA TRANSFER 




SYSTEM 

JUNCTION 

BOX 


TARGET 
COMPUTER 
(SANOAC V) 


Figure 6.6-40. SANDAC V Software Development System 
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Table 6.6-12. Standard SAND AC V Tool Set 


• C-Language Compiler " " 

Kemighan/Ritchie implementation of the C programming language and the 
extensions implemented in AT&T and Berkeley UNIX. Takes as input one or 

C “" g C '[f 1 ® uage «>* and produces a single output file 
containing 68020 assembly language source code. 

• OASYS CMERGE Utility 

r 3SSembly , f lguage Stings that contain, as comments, the lines of 
C-language source code that produced the assembly language code. 

• Quelo Assembler Package (Table 6.6-13) 

■ SANDAC V Object Format Conversion Utilities 
Libraries Supporting 

- C Programming Language 

Math functions (e.g., sin(x), etc.) are grouped separately since the C 
compiler can generate 68881 floating-point coprocessor instructions for 
mathematical operations. 

- Hawk Operating System 

- GATAR/Hawkeye Debug Programs. 


Table 6 . 6 - 1 3 . The Assembler Package 

The Quelo 68020 Assembler Package, which includes the following components: 

M68K Macro Preprocessor . Takes a source file of macro definitions and calls and produces an assembly 
language ouipu, file of macn, expansions dm original definifions and calls am mi£ 

0f 68020 aSSemb,) ' — • — - input and 

a^JJa^aala Brings togelber separalely assembled modules of object code into one large 
befS mS^ * re * ocatedlOMecu, able memory addresses, and references 

QLIB Ohiegt L i brarian - Collects in a single file separately assembled modules of object code. 

Q SYM Symbol Report fonomor . Interprets assembler, linker, and librarian file symbol information to 
produce module remions, symbol table, cross-reference, and memory map reports ^°" * 

QHEX He* File Utility . Converts object files in Motorola S-record format to Motorola Si S2 or St 
Intel hex, or Tekhex record formats for ROM programming. Motorola 61, S2, or S3, 

L IXPUMP Linker Te^t Pump Utili t y . Displays the contents of binary object files in readable form 

2^“y^ £sr i0 " ° f *• SANDAC Vobj^tcodcuaabi^ frnma, bufom being loaded imo a 


SStd^ZT ^ ““ “ M0l0,0la SrcC °' d ’ lainary image n> dm SANDAC 
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Figure 6.6-41. SANDAC V Software Creation Process 








6.6.4.3.S Debug Operations. GATAR, a self-contained monitor/debugger developed speci- 
fically for the SANDAC V, consists of two cooperating programs, one running on the Gateway 
under MS-DOS (S5.EXE) and one running on the target system (GATAR ROM, also referred to 
S firmware). The programs, communicating over a bidirectional data link (Figure 

6.6-42) using an efficient binary protocol, load and activate other software and control the target 

™ f rvT hine ' leVel dCbUgging - ThC targCt SyStCm ' S P 0rti0 " of GATAR is resident in 
SANDAC V firmware. Commands entered via the Gateway keyboard are inteipreted by the 

Gateway s portion of GATAR, which interrupts the target and sends a command packet When 

the target's portion of GATAR receives the command, the application is interrupted, and either the 

command is executed or an information packet is created and returned to the Gateway, or both. All 

appropriate information is displayed at the Gateway. Functions available through GATAR are 
summarized in Tables 6.6-14 and 6.6-15. 

11,6 Gatewa y Portion of GATAR, manages all interaction with the user, formats data into 
and from user-readable form, and provides mass-storage facilities. The Gateway assumes much of 
the time-consuming, text-processing workload to avoid overloading the SANDAC V and minimize 
the effort required to make cosmetic changes in the operation of the system. Most of the Gateway 
program is coded in C-language to facilitate maintenance. 


CA SANDAC V P 0 * 00 of GATAR (GATAR ROM) extracts/alters data and controls the 

SANDAC as commanded by the Gateway. The GATAR ROM, consisting entirely of trap- and 
interrupt-driven code written in assembler language for maximum speed, resides in the SANDAC 
V s Utility Module ROM and is available whenever system power is applied. 


Hawkeye, a task-level debugger developed specifically for the SANDAC V system consists 
of the MS-DOS Hawkeye program in the Gateway and Hawk kernel services that monitor/control 
t e Hawk operating system while an application is running under Hawk control. The program: 


Provides an interactive user interface to the 
Hawk OS in the SANDAC V, 


application code that executes 


under the 


^?! )les a aser t0 monitor and debug tasks executing in the multi-processor multi 
tasking environment of a SANDAC V. processor, multi- 

' Signer (CtagT Gatewa > ,/Hawk interaction including access to the Hawk-kemal 


Monuore and controls applications running under the control of the Hawk operating 
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Figure 6.6-42. Debugging Equipment Configuration 
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Table 6.6-14. GATAR Capabilities 


• Load code from Gateway disk file to SANDAC V memory 

• Recode from SANDAC V memory to a file on the Gateway 
Verify the contents of SANDAC V memory with saved file 

• Reset a processor, 

• Execute code from a given point to a given point, 

• Execute a single machine instruction, 

• Set, remove, or change instruction breakpoints, 

• Terminate a process immediately, 

• Display contents 

- memory, registers 

- current execution status, 

• Change contents of individual memory locations, registers 

• Fill a block of memory with a given data pattern, 

• Assemble and disassemble 68020 and 68881 instructions, 

• Enter and display parameters in 

- hexadecimal, decimal, floating-point, textual formats— all 
! sizes supported by the hardware, 

• Handle input/output via simulated standard I/O functions, 

• Access MS-DOS commands without leaving GATAR 

• Start all functions 

- manually from the keyboard, 

- batch mode via a text file, 

• Log all transactions to a disk file or to a printer, 

• Enter and display parameters by symbolic name; 

• Support symbol tables 

- built by compilers, assemblers, and user commands, 

• Display contents of memory locations 

- user-defined screen format 

- continuous updating. 


Table 6.6- 1 5. GATAR Symbolic Debugging 


• The symbol table can hold about 2000 symbols, depending on the average length of the symbol 

names and the memory available in the Gateway. 8 y 

• Each symbol has a name, an associated data type, and an integer value. 

• The data type corresponds to the storage format of the named data, i.e., the format in which the 

W tSddto? “ ; *■?» “ ! *» WlwiUon program. Or the syTbol 
would be a FLO AT64 data type if alt is a variable declared "double" in a C program. 

' Sg^bflTltTer^ 8enC,aJ ' y C ° TCSP ° ,ld:i 10 abs ° ll " c ^ as 


6.6-72 





User input can be invoked at the keyboard or from a command file (auto-execution mode) 
The user, by making a few calls to the Hawk run-time library, can open display buffers in 

Hawkeye, send output to them, request input from them, read and write disk files on the Gateway 
and a log data to disk files or a printer. y ’ 

Hawkeye kernel services can be embedded in an application for diagnostic purposes, 
en die services are called during program execution, they wo* with the Hawkeye program to 

create dtsplay windows on the Gateway, to output messages to the windows, or accept inputs 
entered in the windows. ” 


" aW ye S ° ftWare r “ ides °" U,c Gate ™)'- However, for Hawkeye to communicate 
wuh the Hawk operating system, Hawk creates a special window-server task. Ibis server task 

which ts less than IK bytes, is linked with the application code to be loaded into the SANDAC v’ 

Hawkeye then communicates with the server task over a bidirectional data link, using variable 
length datagrams. 


Cbug testdes in the SANDAC V PROM a, all times and is capable of displaying all of 
Hawks internal data structures in an easily readable text format. Cbug also provides mom 

iradmonal debugging features such as setting breakpoints, displaying/modifying memoty, and 
assembling and dissembling instructions. 


6.6.4.4 Computer Siring Details. The formal methodology for processor selection ideally 
begins with prototype software being in-hand for RRS application. An "algorithm data flow 
analysis ts then performed and related throughput and memory analyses are made. The memory 
analysis conststs of an apportionment of the nonvolatile memoty (for storing data and code of the 
programs) and the local addressable memory (per program function sizing). The throughput 
analysts consists of transfotming the measured throughput from the mix of operations in the 
eve opmental code to the mix of instructions that is typically the standard of comparison for 
candidate s/c processors (such as the DAIS mix conventionally used for 16-bit machines) The 
separate processing throughputs for each software function, or at least for the "driving functions,” 
enter into play as do also whether the functions can be done in parallel. This transformation entails 
a mapping from the throughput currency of Mops, used for the developmental code, to Mips as 
candidate processors are rated, and is machine and somewhat language dependent. In addition a 
mapping rs needed for the ramification of single to double or extended precision (which is usually 
considered x 2 for a VAX but seemingly much closer to 1 if a 1750A / Ada is used). Finally the 
ramification of using the desired real-time language as opposed to the language of the 
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rrr r* enters imo Ae mappin8 <wi,h effect ^ bu , 

Fortran or Q SUch as Ada ^““"g 2 ° ‘° 50* more code than 

■hnreh n PreC,S1 ° n a ” d miX flgUreS are modifi ' d » accordance with rules of 

In TJ " W ‘ ““ WheneV ' r 3 ^ - encountered in the 

codmg. Taking tnto account needs such as re-starting to save power, the processor recommenda- 

onrsin e y blending the three analyses to make a comparison between the throughput rating 
and mentor, capac.ty of the candidates. The final recommendation is in the form of the destred 
word length, memory (addressable / primary), and operating system. 

6.6.4 4.1 Software Sizing and Tinting. Ideally sizing and timing analysis and the 
methodology for selecting a processor for real-time space processing L linkeT.ogether 
owever, sutce prototype software was not available for the preliminary RRS design a mixed 

roul«Ttt teCh 7 UeS SUPP ' enKnKd * cm “" P“y Simplifying enhancements to 
rcsoIesIlnZr 9 RRS ° NC ^ “ — - -ftware 

Although we have considered certain nominal TT&C operations in the estimation of needed 

compute resources, the HEDH functions have no, been factored into the analysis since they are 
considered a relatively minor contributor to the budgeting. 

The resultant sizing and timing analysis is succinctly treated in Table 6.6-16. 

1) use o?l m cl P ,T S T ° f ' ” MftWare Si2i " g and dming “W have been tite following: 

t on ' 7 ^ f 2 ^ ° f ”* f0r ^ -errainties and 

future growth cons.derattons, and 3) provision generally for doubly redundant software 

manjlanons that are even triply so for decisions entailing "controlled reenny" (tantamount to 

« eventual man-rated consideratio„ s for events starting witit tire maneuver Z tile 

an™5”^Tal7 ntS) ’ "» - dming estimates by 

maneu^I ^ f0, “> »*> * de-orbi, 

17 4 ; 2 M r r> SiZi " 8 ReqUiremen,S w ' have estimated that the memory require- 
nren^forapp,, canons software as 0.50 and 0.51 Mbytes needed for data and code, respectively 

“ S ra ZCd 0ptratl "« $ y s,em < of °S / 1-0 / test / utilities functions), the corresponding 

“ 7'T f 10 “n 012 Mby “ S respecdvely - ^ese number, were obtained by presuming that 
48-br, words of exrended precision are reievan, for tire "raw” sizing estimates tij Z document 
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™ 2 17 K°n r” 1 "' 0f 16 ' bh WOrdS - h addid0 "' * to Slight wrinkle of enlarging dre data 
valMcy Th e *" f GPS naVigation “usages of presumed two-weeks duradon/ 

detemtini h ! d ° Wn by function is 0.36 Mb of data for "conventional ephemerides ” 

telemetry processrng necessrtate 0.07 and 0.04 Mb respectively. 


Table 6 . 6 - 16 . Software Sizing and Timing 
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factors of 2 nd 3 T Z 8 ' VeS 0 5 + °' 51 + 012 + 01 ■ *-23 Mb times two 

factors of 2 and 3 respectively for the effect of the design pad and nn-sized functions and for the 

mandated triple / double redundancy. Thus, 7.38 Mb is required for local memory. 

Similarly, the throughput demand if 1.44 x 2 x 3 = 8.64 Mips DAIS. 

USaIac^T "I™ Summary - 711656 SOftWare res ™ ces be achieved with 
modules. Accordingly, the local memory capability is 8 Mb of which 1 Mb comes 

1 m 77 7 m0dUlC (S °' Called UM) ’ 1 Mb from two 68020 Pressor modules (20PM that is 
also needed for managing the system 1/0 data traffic interface), 2 Mb from the sing^68040 

processor module (40PM), and 4 Mb from two local memory modules (LMM) The tLghpm 

— i " is 2 <u) + • ■ >« M iPS ha d JLfjzssz 

case extra message traffic and task scheduling is needed. 


The corresponding sic loads for these 1 1 SANDAC computer modules are as follows 

• Power = 56 watts 

• Weight = 1 1.2 pounds 

• Size = 286 cubic inches 


6.6.4.4.S Other Underlying Considerations. There are certain underlying considerations 
at are impottam to software development for the GNC portion of RRS project, such as: 

• Paramount requirements analyses 

- Error analyses 


- Sizings/accuracies needed/driving considerations 
-- Orbit choice 


Stadon-keeping (total delta-v, schedule & strategy) 

-- Attitude stabilization modes used / reason / regimes 
-- Attitude accuracy for de-orbit (vs artificial g) 

-- De-orbit delta-v, bum time, predicted impact velocity 
-- Retrofire delta-v per impact velocity 

-- Chute delta-v handled, redundancy, winds effect / model 
~ Details of event timeline 

-- Range /public safety (constraints, provisions) 

-- SEUs from Van Allen belt 
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Integrated hi-fi simulator & associated building blocks 
Software tools available, needed, mapped out / overview 
Mission analyses of import similarly 
• Orbit choice 




Effect on thermal loading, station-keeping, etc 
Treatment of jointly optimized G&C or attitude problems 


certain 


6.6.4.S Interface Support. The GNC 
all vehicle subsystems (Table 6.6-17). 


has functional interface 


requirements associated with 


* uuiv 


i / . 


PAYLOAD: 


interlace Support 


_re °S E 1 A 5, 7 ^ IAL grav ity control 

S^ m P l >' Wlth Magnetic Field Limitations 

- Provide Command and Data Interface 
“ Cancel Angular Momentum 

• PROPULSION: PROVIDE ATTITUDE THRUSTER CONTROL 

- Provide Retrofire Thrust Alignment 

- Control Retrofire and Trimbum Thrust Duration 

TT&C: 


POWER: 

REENTRY: 


THERMAL: 


RECEIVE COMMANDS 

Provide Telemetry Measurements for 

- Attitude Determination and Control 

- Structural Dynamic Alignment 
-Reentry/Recovery Performance 

- Provide Location/Atti tude/Impact Data for Tracking Beacon 

CONTROL SaDSHED^ CONFIGURATI ON AND REDUNDANCY SWITCHING 

- Reonent for Conrect Aerodynamic Reentry * 

CONTROL THERMAL ROTOSERffi AND CANCEL ANGULAR MOMENTUM 
MONITOR STRUCTI in ai A? 


fiuuaai&Kic ANI 

STRUCTURE : MONITOR STRUCTURAL ALIGNMENT 


6.6.4.6 Weight/Power. Tables 6.6-18 
for the preliminary GNC design. 


and 6.6-19 provide the weight and power summary 
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| Component (watts) 

I MICROGRAVITY MODE 


- Receivers(*) (3) 

- RLGA 


Table 6.6-18. GNC Mass and Power Summary 


GPS 

IMU 


| MADS - Magnetometers (2) 

- TORQRODS (3) 

- Momentum Wheel (2) 

- Electronics 


Function 


Navigation/Orientation 
Inertial Reference (2) 

GG Attitude Determination 
GG Attitude Control 
Yaw Momentum Control 
Pwr Supply (1) (80%) 
Subsystem Interface (1) 
TQR Controller (1) 

Motor Drivers (2) 

Microprocessors(*X*): 
MADS (1) 

Thruster (1) 
GPS/RLGA (1) 

Control Law (1) 


Mass (lb) 
Ave. 


30.0 

13.0 


Power 

Peak 


| mads - SCANWHEELS (2) 
- Electronics 


Subtotal 


18.0 

17.0 


GNC SYSTEMS TOTAL 


39.2 


148.9 


(*x>) SropSS^l Pr0VideS Single Vect ° r determ i nat ion. 


27.0 

34.0 

0.06 

34.2 

32.0 
15.64 


Subtotal 

109.7 

55.4 

142.9 

Additional Equipment 

Attitude Deteimination/Cont 

30.8 

2 2 

32.2 

8.75 

Additional Power (80%) 


8.75 

Motor Drivers (2) 

Micxopfocessors(*X*): 

Sensor Sig (2) 
Attitude (2) 

2.8 

2.8 

2.8 


10.95 40.95 


66.35 183.85 


6.6.5 Control Requirements 


TDR<!<! Alth0Ugh f th ' i° NC Subs),SKm has b “" configured to not require TDRSS coverage 


6.6.6 Special Testing 


orecid B0 'r O'™ 0Perad0nal natUre 0f CndCal func,ions Propulsion control) and the 
P ° f ‘ he ° PS atti,ude deteml inarion capability requ.ro special test consideration. Of these 
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Table 6.6-19. Guidance and Control Mass 


* 

O 

Oh 

T3 


§ 
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Although^ Zt r^u^exLXr 0 " “* the most difficult to test. 

insertion capability and will require testing o^ ^ CqUiPment ’ the tCSt wil1 re< l uire a failure 
operating conditions. The GPS test will o ^ "1 6 ° f P 01 ^ 31 * not just anticipated, 

demonstrate that multipath conditions do “ 3016,1113 * 

performance. Although the propulsion/GPS/IMlJ/S u gniflCantly affect the subsystem 
interaligned, any misaligmnent error will sinrply becojpl ofl ""‘r ‘° '* appropriate, >' 
perfonnance error corrected during de-orbi, opemtions. Pr ° PUlSi0 " ” d GNC 

6.6.7 Manufacturing 

The GNC subsystem is not expecred to require any unusual manufacturing requirements. 

6.6.8 Refurbishment 


r .p:r ssraH-rzssr-fr— 

chance that the choke ring assembly used to min’ • Y ' There 18 a significant 
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6 7 Telemetry, Tracking, and Command (TT&C) Subsystem 

telemet^veh^^ano^pay^d^d 0 ^^ S ^ ““ C ° n,rol ° f "* Vehid ‘ “ d thc »»«» » 

rrs, the J::rz:“jrr ,o ^ ~ s - *■ ,he ~ * - 

are performing in an acceptable manner P l reqUlrcd “ Vehide and payload 

_ informati ™ fr o™ iKsiss toS“Stio“ mna " d 

• Xte'fe “ayCSdX' lehicte »b“ 

encode data for downliKa^^s ion Spacecraft subss ' s,erns «o format, convert, and 

£S£J sSsSg die* orbUa^and ‘recovery 
certain cnhance coverage performance for 

de S ign/orerlrrcr s lLt^o 0 T ati0,,S raUS ‘ ** RRS miSSi ° n 0bj ' ec,ives for 

the-shelf technology, fienuencyfnterf Sa °°" S ^ Ual/temp0ral covera * e - data ^ capacity, off- 
recommended TT&C configuration conrfsK 0 ^ P ° SSlWy redU " danCy ° f key com P°"cnts. The 

Antennae and selection switches 

• TDRSS transponder 
Telemetry data system 

* Power dividers 


6.7.1 Operations Timeline Support 


DR Ms 1, 2 and 3 (Table 6.7-1) were used to analyze and design the RRS TT^r 

subsystem. Contact opportunities were calculated for NASA Ground St ri ■ . &C 

TDRSS. 5A Oround Stations, the AFSCN, and 


6.7.2 Design Requirements 


Guidelines. The general groundrules and assumptions used in the TT&C trad a 
included: l)a sin?1p j • , * l&C, trade study 

angle TT&C design should be capable of meeting aU mission needs; 2) proven 
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hardware and software should be used in the design- . , 

and 4) a n*,„ m of two contacts per day is desitL'. 8r ° U " d ' baSed SUPPOrt must <* “«*■«; 


Table 6.7-1. RRS Design Reference Mission Set Definition 



N° TE: Ore and Im denote circular and integer orbits. 

ETR and WTR denote Eastern and Western Test Ranges. 


down W loM ' " 

*• — - *■ - « 25SKT * 


Single TT&C Design for All Missions 
Minimum 2 Contacts Per Day - 8 to 12 Hour, Separation 
• Minimum 10 Minutes Each Contact 

■ Uplink - Maximum - 2 Kbps 
1 Downlink- Satellite 16Kpbs 
Payloads 16Khp<: 

Total 32 Kbps 
Redundancy of Key Systems 
Omnidirectional C overage 

least twice a day System design goal " S 20(1 vehlcle /payload telemetry, at 
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technology, generous margins of capability high rriiahti.** 

of is a of "* ^ -* *■*»- *«. «* ^ 

application. I, addressed 60,^^ J„^"ATe SySKmS ** RRS 

-r t have the “ — — " r^sr: : rr rr 

operational lifetime, i.e., 1994 - 2004 Th* . ^ RRS 10 * year 

parameters have on the RRS TT&C^s h ^ eXa ™ ned impaCt that 0Tbia> 

. ■ a * S TT&C subs y s ‘e”s. and combined with the outnut of Pan , 

detenmned wh.ch communication stations/systems could provide as a minimum , 

:^Trr“-r = 

track^^ ^ P ° StU,ated ** tdemetry ’ COmmand * "* 

s cnons necessary to support operations in the post-1993 time oeriod mac a 
stations. Air Force Satpllifp pAntr^i xt . ^ * ^*ASA ground 

planned he availahie hy then were ^ ““ ‘ ha ' “ 

purees were contacted to develop guidelines and muirwn'ZTovte^^c 
definition data necessary to complete the studies. &C 

srs “rr- “4^ - - sss 

Guide and dte AF Space Test Rmge N 7° rk ^ 

and inferences, dte following information and results were developed. ‘ 

The NASA Space Tracking and Data Network fCTnM\ r- 

(ON) and a Space Network (SN). The GN is being phaLd d^T^i^T 

dte Merritt Island Uunch Area (MILA), Ponce de Leon (PDL)' ^ JSl t I” 
Communication Sites CBDA'i Thrace •» ^ ' d Bermuda Tracking and 

communications ^ £££?? ^ 

ppuxi lor spacecraft and launch vehicles during th<» rpq 
epending on schedules, these sites could provide some limited support to RRS, but could no'be 

onstdered as prime orbital support sites on a continuous basis The cm 
segment and the ground segment The ™ onnnuous •>**“• The SN consists of the space 
ground segment. The space segment consists of two operational Tracking and 
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Data Relay Satellites (TORS) and a spare TORS in geostationary orbit, 
functionally identical communications capability. Figure 6.7-1 shows the 
tion available in 1990. 


Each TDRS provides 
basic TDRS configura- 


TDRS-EAST 



The ground segment consists of: White Sands, New Mexico, which provides the 

TO^TtlelfTh “Tctr da “ ttanSfer ™ the TORS as Wdl as "Potions control for die 
TORS itself, the NASA Ground Tenninal (NOT) which provides the operational interface 

Ba“4“ M ; o r n cmiCT ctedts: *• mu - a - - t: 

ase (VAFB) TORSS relays, which provide a prelaunch, launch, and bonding support for the 
Space Transponanon System and spacecraft payloads of various users. Based on the above 
iscussion, die only NASA STON service available in 1994 and beyond would be TORSS 


S P a “ N «"°* (DSN) consists of tiie Goldstone, California; Madrid, Spain- 
and the Canberra, Australia deep space communication sites. Controlled by the Jet Propulsion 
Laboratory (JPL), these are dual sites, i.e„ one she portion (or side) provides only deep space 
support, the second side is comprised of the old SDTN sites which were turned over to JPL with 
the phase down of STON. These sites provide telecommunications and tracking support during 
an Inertial Upper Stage (lUS)TORS deployment for the NSTS as well as transfer and on Z 
options unng initial checkout and verification phases of the TORS mission. In addition, the 
pace etwork (OSN) provides backup support to the DSN until TORSS becomes fully 
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“.srj” sr:;*rr "•“* - „ 

for limited support during the 1994 to 2004 time'fra'LT ^ 0 ^°^ W ° Uld 3,50 "* aVailablc 

for full time (60 days a, a time) suppon ,o the operational RRS n °' “ 



GLS - Goldstone 
MILA- Merritt 
Island 

BDA - Bermuda 
MAO - Madrid 
CAN - Canberra 


^ ° 4 \ 

CAN 1 



Figure 6.7-2. NASA Space Network (1992) 


provide telemetry, command° ““ “'^vely are used to 

and foreign government space programs AnT”" ^ plus Iimired NASA 

6.7-3. The ASFCN win consist of ni„e'(9) sites"^!!^ TJ “ SlK>Wn in RgUre 

srtes are dual sites and three are single sites Thed. I • 7 yond “ meframe - Six of the 

equipment to allow multi-vehicle support at the site The* <7' ^ aSS0CiaBd 

and consist of the Vandenberg Tracking Station N H . ‘ ®* “* ocated arou " d Ihe world 
ing Station, Guam Tracking 11, Z u T ^ TracWn « Sd “*>". Thule Track- 

Station at Oakhanger, England The sinlT t S ‘ an ° n ’ and ,he Telemetry and Command 
Tracking Station, and the^Diego Ga^rTracI^g^ation^igure 1 ^ 1 gtadon ’ Colorado 

- cu ™ * * “ - - - ™ 
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opace iMetwork (1992) 

Saw :::rr'-' *• smm « *«• „ Sunnyvale CaIif . 

apace Operanons Center at Colorado W,, ^ , y J ’ Cahforni a> and the 

is shown m Figure 6.7-4. P gS ’ Color ado. The AFSCN "landscape" 


Ihe AFSCN can provide ppc 

function is s„ pt » n to Ihe ^ ^ for TT&C. However, its prime 

;r e ' but * wou,d - - — * ^ z z zz sr prov,de 

^ S - ouysatat.me)suppon for an operational 

6 . 7 . 2 . 2.2 Impact of Orbital Parameters Tort., 

Characteristics for the three Design Reference ° rb,,:U Parameters for the RRS, orb.tal 

Network, the TORSS, Md Ihe AfsCN ™“" S 7' P '°‘ !ed -he NASA Space 

“ C aC ' enZed by a «0 km circular orbit altitude and for DRM l ' »hich 

Equator. As shown, the NASA network limits its cov inClmarion "Native to the 

and lnc Euution, there are two contacts per day H “ ^ hemis P here - A' this 

"truutes each and occur within 2 to 3 horns ofTTj T' ** “““■ « '0 

con tguratton, characterized by 900 km altitude and 33 83 T" *' 7 ' 6 displays the DRM-2 

a " d 33 83 de S re es inclination. This gives 
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basically the same coverage as for DRM-1; contact time does increase to about 10 minutes each. 
Figure 6.7-7 shows the ground track for DRM-3, characterized by 897 km altitude at 98 degrees 
inclination. At this altitude and inclination, the NASA network can meet all of the 
communications requirements, except continental U.S. coverage, i.e., two contacts per day each 
of 10 minutes coverage; and there are 10 to 12 hours separation of data collecting (between 
contacts). However, in order to get the needed separation, the Canberra tracking station would 
have to be utilized. The detailed contact histories for DRMs 1, 2 and 3, using the NASA 
Tracking Network, appear in the TT&C Coverage Summary Report. 



Figure 6.7-7. DRM-3 Ground Trace — NASA Space Network 


AFSCN orbital traces are depicted in Figures 6.7-8 through 6.7-10. These figures depict 
coverage for each of the design reference missions DRM-1, DRM-2, and DRM-3, respectively. 
In DRM-1, the coverage approximates the NASA network's coverage for DRM-1. However, 10 
to 12 hour separation can be attained utilizing foreign sites. DRM-2 will allow coverage for over 
10 minutes, but foreign sites must be used for the separation. DRM-3 allows coverage as 
required and, with judicious planning, could provide continental U.S. site coverage. Detailed 
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Figure 6.7-10. DRM-3 Ground Trace 


- Air Force Space Network 


contact histories for DRMs 1, 2 and 3 
the TT&C Coverage Summary Report. 


using the Air Force Satellite Control Network appear in 


TDRSS geometric coverage is summarized for DRMs 1, 2 and 3 in Figure 6 7 11 a 
shown, each of the Desion J in ri S ure 6.7-1 1. As 

Design Reference Missions would have all requirements met an H „ 
cases where additional re »i h™*. „ • , cquirements met, and even in 

detailed contact T, 

Summaty Report. 8 TORSS ap P ear “ the TT&C Coverage 

to be the use of TDRSS support the 10-year life span oftheRRS *""" 
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100 


1T .urUNETION. . 

— ' 

: 


DRM 2/3 


DRM 1 


^ 2 f l A PER 0R BIT BASIS 
CIRCULAR CjRBlT ASSUMED 


1000 


ALTITUOE IN KILOMETERS 

Figure 6.7-11. TDRSS Coverage Versus Altitude and Inclination 

Table 6.7-3. Contact History Summary 


drm-i 

(350 km - 
33°) 


NASA Space 
Network - 1992 

• Can Get 2 Contacts Per Day 

• Minimum 8 Minutes Each 
Coverage 

Cannot Get Coverage of 
8-12 Hours Separation 
(Get 2-3 Instead) 

Coverage of Northern 
Hemisphere Only 

Same as for 350 km, Except 
Each Contact of 10 Minutes 
Minimum 



Can Get 2 Contacts Per Day 
Can Get 10 Minute Coverage 
Can Get Coverage - 10-12 
Hours Separation if 
Canberra Used 
No CONUS Coverage 


AF Satellite Control Network 

• Can Get 2 Contacts Per Day 
Maximum Coverage 8 Minutes 
Can Schedule to Get Coverage 

- 10-12 Hours Separation for 
Foreign Sites Only 
Northern Hemisphere 
Coverage Only 


• Can Get 2 Contacts Per Day 

• Maximum Coverage 12-14 
Minutes 

• Can Schedule Coverage - 
10-12 Hours Separation for 
Foreign Sites 


• Same as 33° Inclination 

• Possible U.S. Site Coverage 
if Scheduled Wisely 


TDRSS 

• Allows Coverage at Any 
Time Needed 

■ Data Received in USA 

■ Only Limitation Is Scheduling 

Greater Than 80% Coverage 
Available Each Day 

10 Minutes Contact Minimum 
Minimum 8-10 Hours 
Between Contacts 


Same as 350 km 
Greater Than 95% Coverage 
Available Each Day 


Same as 900 km, 33° 
Inclination 
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6.7.3 RRS TT&C Subsystems 


z‘ziT,eT^Ta rrr™; m rr and siave " rc,a,ion ' 

(Figure 6.7-12) is summarized in Table 6 7-4 with the as • a subs J ,SK ” configuration 
provided in Table 6.7-5. S ° C ' a,Cd P ° Wer a " d wei * ht ^ary 

i" re c h F :rr::“:' frcquencies were considered ' s - Ba - d 

fra . , ^ nc ^ communication link for numerous reasons S-RnnH 

bo* NaIaZ Us" i SPaCC T indinati ° nS and is com Patible with 

ces. Using S-Band also enables use of TDRSS for critical operation 



TOR42CV25 


Figure 6.7-12. RRS Communications Subsystem 
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table 6.7-5. 


TT&C Weight and Power Budget 


| Antennae 

20 oz overall 

I Antenna Selector 

6 oz each 
100 MA each 
20 to 32 V dc 
2 Required 

Transponder 
15.15 lbs each 

^tve 1 iSSKSH T “ ““* “»al for 

0 7.5 if receiver mode used) 5 Wpowerani P llf *r nispcc lively 
28 ±7 V dc voltage source 
Standard TDRSS User Transponder (2 required) 

Telemetry System 
6 oz each 
500 MA each 
28 ±4 V dc 

Miniature programmable telemetry system (2 required) 

Power Divider 
0.3 lbs each 
TBS 
TBS 

4 required 
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coverage. Use of the L-Baod frequency is not recommended because of potential interference 

IL W. TT d th e RRS Md ‘ he Umited SUPPOrt aVa ‘ lable at NASA ffocnd network 
. P -ground links at S-Band were examined on otiter programs including Shuttle Orbiter 

Land Sat, Space Lab, Space Telescope, Pioneer, and Galilet^and this evafuation provtded 
confidence in application of S-Band to the RRS. 

^7.32 Subsystem Selection. A senes of investigations were performed of candtdate equipment 
posstbthttes utilizing NASA program documents, manufacturers' btochures, and past experience 

“r 3 7T C W °“ ld SUP " by off - ,he - shelf equipment, 

though, TV downlink is not clearly required, 10 W S-Band FM transmitters are available if 

8 beCOm ; S “ requ,ren,em ' Possibillri “ for upgrading the S-Band communications were 
investigated and include: 1) providing some attitude control to RRS, 2) using a directive antenna 

with medium gam, and 3) providing a power amplifier and low-noise amplifier (LNA) to the 

transmttter and receiver of the S-Band transponder interfaces. 

Discussions were initiated with companies making products in the S-Band frequencies 
including ^transponders, telemetry, command, antennas, antenna selectors, and power dividers' 

<ISC> engi "“ r8 ' haVi " 8 eXpeniSe in S - Band comm unications and on 
an RSS operational performance, were contacted and provided technical informa- 
on on the overall common, cation system used to TT&C on JSC projects. Investigation of the 
equipment candidates resulted in the following proposed configuration for the RRS TT&C. 

reI«dT and T C ° ntr01 ' The NASA S “° nd Generation S - Ba " d User Ttansponder is 
recommended since the equipment can communicate via the TDRSS Satellite Multi-Access 

system (Figures 6.7-13 and 6.7-14) as well as directly with the GSTDN and USAF ground 

stations. Although the TDRSS omni-directional data rete capacity is only 125 bps this is 

sufficient provide worldwide visibility for citical operations. Since the cult powt ^ 

the RRS 1S ei ” 8 T" SUCCeSSfully v,a “"“'-antenna over the operational altitude envelope of 
the RRS misstons, the system should have no difficulty closing the link over any of the three 
potential communication routes. 

The command system is comprised of a separate receiver/decoder. The NASA Second 
t on Band User Transponder (Figure 6.7-15), which is compatible with both TDRSS 
and ground stations, provides the receiver function. The uplink command capacity is 2 and 

KbPS f ° r thC STDN a " d ™RS modes respectively. The command decoding 

Junction is performed within the GNC computer. 
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Rgure 6.7-13. TDRSS Forward and Return Service Frequency Plan 

S-Band tl ’' T1 — c °verage is the use of 

frequencies. A ^ 7 ““ ^ «— and telemeuy 

dividers and mounted on the exterior surface of the Deployed Module a 17 
dte multiple antenna elements is illustrated in Figure 6.7-17 ^of 0nenta ' 10n . fOT 

gives the best radiation pattern coverage for omni-directivity An altemaKao"* TTh” SW ' tCh 
use a cross dipole system, also mounted on the DM a!d would W ° U ' d 

performance, is still being evaluated. ’ PPCar l ° provide better 
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Figure 6.7-15. NASA Standard TDRSS 
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OUTLINE DIMENSIONS (INCHES) 




Figure 6.7-17. Antenna Orientation 


6.7.3 4 Telemetry. The type of telemeny (Figure 6.7-18) lUcely to be needed by the vehic.e was 

inves gate y analyzing the Rodent Module requirements (Tables 6.7-6 through 67-10 for 

example). Since this resulted in a clear need for flexibility, a miniature, programmable data 

ys em manufactured by Ayden Vector was selected. This modularized system is des.gned for 

g pe oimance data acqtusmon and operation in severe environmental applications where size 

performance, and reliability are primary requirements. The system combines data multiplexing 

and ^ conditioning wtth user programmable gain, offset, and format selection. A 10-bit high speed 

an og-to-digital converter and programmable gain amplifier provide digitization of a wide range 
of analog inputs. 6 
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Figure 6.7-18. Telemetiy System 

modulc^L^rec^reTe 8 ^ “o'!" “ Km ° Ve “ y module ' add 

(EPROM) co accept a new measurement lT ! *««KW, Memory 

example). A remote "slave" „!! * COnf,8urations < TaW « 6.7-11 and 6.7-12, for 

away from its "master ul , TfT *“ inCOrPOrated I>OSido " cd - * as 300 feet 

slave. CTe 1S r ° Ughly 8 50 * penalty ■» power consumption for the 
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buses, and is reprogram^ L^ttefidd ^ Com P u,ers and 1553B daia 
features a« based on CotnplenKntary ^ 0x^7 T ^ The programmable 
and provide up to 64 gains and offsets ° Xlde Sen “ cond “ c » r ^ ( CM °S) EPROM technology 
architecture for the RR S confi gura do„ is present” ZZfvT' “ * Prdim ‘ nary 


event signals 


Table 6.7-6. Vehicle Event Correlation 


launch vehicle separation 


ATTITUDE control 

mode CHANGES 64 states 

EREE DRIFT acceleration 6 b 

FRACTIONAL G RATE CONTROr /a 10 b 

ATTITUDE (operating, DE^RBm (8 meets ^^ent) 10 b 

J 24 b 


COMMANDS ID/time 


REALTIME 

programmed 


1 AIRECTH.AR INTtspy^f I<f 

1 module 

STATUS 


Table 6.7-7. Module Monitoring 


ENVIRONMENT 

light/dark 
intensity 


CLOCK 

EQUIPMENT status 
OPERATING MODE 


fine/medium 
65K state capacity 
256 state capacity 


BR-963 

I CJC-900,TC-953 


Total PRESSURE 
°2 CONCENTRATION 
CO 2 CONCENTRATION 
AirRegDiff 
0 2 Reg Diff 

humidity 
TEMPERATURE 
Air Flow - pres 


Condensate pres 


2 Analog/SE; ID/2048 
2 Analog/SE 
2 Analog/SE 
1 Analog/DE 

1 Analog/DE 

2 Bridge 

16 Thermocpl 
32 Analog/SE 
18 cage 
4 supply fans 
6 supply plenum 
4 exhaust plenum 
2 Analog/SE 


40 b 
40 b 


56 b 


STATUS 14) 

18 Analog/SE, 5/75 lux; 10 %; 8 b {J/J **'**' 2 each ’ 0/0 
ACCEL (LOR) 15 MIN RES, + 2% 3 ‘ 

atmosphere composition ^ 


24 
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Table 6.7-8. Experiment Monitoring 



AT SCHEDULED TIMES 

INTERNAL CAGE IMAGES 

^3*512 x 8 optimal 2.097 Mb 

256x256x4 acceptable 262 Kb 
f8 bits, f4 res, fl6 contrast 

1/cage/hour for 30 days = 424.67 MB 

SELBCTED RECORDS/ MAGES SHALL BE TELEMETERED DURING FLIGHT 


32,768 KB/image 
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Table 6.7-1 1. MMP-900 PCM Encoder Configuration for the PM 


I/O 

SYS 1 

SYS 2 

FUNCTION 


ii u it ji |i a 

fWHifWff 

11 H <1 ii II li 

wwwwww 

End Plate and EPROM access cover. 


PR-914E 

PR-914E 

Programmer - Sync/address/cntl/cntr, entire system 

TLM OUT 

TM-915A 

TM-915A 

Timer - Generates bit/word clock and sample pulse for sys timing. 
Transforms formatter output into PCM input (NRZ-L/M/S, Bi-0- 
M/S/L, DD-M, RNRZ-L) with bil/word and minor/major frame 
synch. All TTL compatible. 

DATA IN 

MP-901 


Analog Multiplexer/ Amp - Accepts 32 analog sensor inputs, 
conditions for single or differential, forwards to amp, which provides 
sampled pulse amplitude modulation level, per prog sequence. 

DATA IN 
DATA IN 

MP-901 

MP-901 


Analog Multiplexer/Amp - 32 sensors 
Analog Multiplexer/Amp - 4 sensors, 28 spares 

DATA IN 

MP-901 


Analog Multiplexer/Amp - Accepts 24 (8 bpw) inputs and forwards 
data directly to formatter. Digital inputs of more than one type, 
including MIL-STD-1553B, can be formatted within the same 
encoder. 


LA-975A 

BR-963 

BR-963 

BR-963 

Level Amplification - Converts full scale single range from 5-10 
volts to user selectable 1-20 volts SE, 10 mv to 1 volt DE. (200ma) 

Bridge Conditioner - 8 bridges 
Bridge Conditioner - 8 bridges 
Bridge Conditioner - 4 bridges, 4 spares 



TA-953 

TA-953 

CJC-900 

Thermocouple conditioners - 8 sensors 
Thermocouple conditioners - 8 sensors 
Cold Junction Compensator - 16 TC pairs 



FM-918 

FM-918 Formatter 



AD-906 

AD-906 Sample/Hold A/D Converter - Holds sample, 

converts to 8, 9, or 10 bit, and forwards to formatter. 



CI-942 

CI-942 Computer Interface - coarse/medium time tag (5B) 



CI-922 

CI-922 Counter/Accumulator - S V clock, 20 bits (1 2 day) 

PWR IN 

PX-984 

PX-984 

Power Supply - Includes crystal clock. Accepts external clock input 
for synchronized operations. 

28V 


14.0 W 

1 1 .2 W (assumes 33.3ma/slice other than LA-975A0) 
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Table 6.7-12. Aydin Vector MMP-900 Micro PCM Encoder 


I/O 

SYSTEM A 

SYSTEM B 

FUNCTION 


Hit U U iju 
ft IT ft ft ffff 

iliiJUl II II 

ff 1* tf ft TP 

jTTFTTff TTfr 

End Plate and EPROM access cover. 


PR-914 

PR-914 

Programmer - S ync/adress/control/counter for entire system 

TLMOUT 

TM-915 

TM-915 

Timer - Generates bit/word clock and sample pulse for sys timing. 
. formatter output into PCM input (NRZ-L/M/S Bi-0- 

M/S ^’ ?.?™ RNR2 ' L) with bit/word and minor/major frame 
synch. All 7TL compatible. 

DATA IN 

MP-901 

MP-901 

Multiplexer/Amp - Either analog or digital. 

Accepts 32 analog sensor inputs, conditions for single or differential 
forwards to amp, which provides sampled pulse amplitude 
modulation level, per prog sequence. 

Ql accepts up to 30 digital (24-8bpw, 27-9bpw, 30-10bpw) inputs 
and forwards data directly to formatter. Digital inputs of more than 

one type, including MIL-STD-1553B, can be formatted within the 
same encoder. 


LA-926 


Level Amplification - Converts full scale single range from basic 

“ff “JJS 16 5 ’f ( J voIts to selectable 1-20 volts single, 10 mv 

to 1 volt differential. 


FM-918 

FM-918 

Formatter 


AD-906 

AD-906 

Sample/Hold A/D Converter - Holds sample, converts to 8, 9 or 10 
bit, and forwards to formatter. 

PWR IN 

PX-928 

PS-907 

A °“ PB “Kraal dock input 

28 V Power 

14.0W 

8.4W 

Added power for LA-926 amplifier 

d " k « - 1 * 1 — 

The output can be from either unit master unu P fOV,des «“««« and control lines. 
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Table 6.7-13. RRS MMP-900 Micro-Modular PCM Architecture 



MODULE 

FUNCTION 

PLl 


rmTrfRrW 

End Plate 

1 


PR-914E 

Programmer 

1 

TLM OUT 

TM-915A 

Timer 

1 

DATA IN 

MP-901 

Multiplexer 

4 


AD-906 

S&H A/D Conv 

1 


LA-975 A 

Level Amp 

1 


FM-918 

Formatter 

1 

PWR IN 

PX-984 

Power Supply 

1 

DATA IN 

MP[-902 

Bi-lev Multi 

- 

DATA IN 

SD-924 

Serial Data 

* 

DATA IN 

BR-973 

Bridge Cond 

- 

DATA IN 

TA-958 

Thermocouple 

- 


CJC-900 

Cold Junction 

- 


PD-929 

Comp Interface 

1 


a-922 

Counter/Accum 

1 

Modules 



12 

Power (watts) 



7.7 

Weight (pounds) 


0.8 


PL2 

DM1 

DM2 

DM3 

MMl 

MM2 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

_ 

4 

- 

1 

3 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

_ 

- 

- 

3 

2 

- 

- 

1 

- 

1 

1 

- 

2 

1 

- 

- 

- 

1 

1 

- 

4 

- 

- 

2 

1 

- 

4 

- 

- 

2 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

12 

14 

14 

15 

14 

14 

11.3 

9.5 

11.1 

9.4 

8.3 

11.2 

0.8 

0.9 

0.9 

0.9 

0.9 

0.9 
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6.8 Power 


6.8.1 Operations 

Power is a critical support subsystem for the payload and must be available for payload 
operations from PM installation through removal. 

6.8.1.1 Prelaunch. Prelaunch power normally will be provided from a ground source via the 
service tower umbilical to the power subsystem for distribution to the remainder of the vehicle. 
The GSE power/thermal pack, normally used for post-recovery operations, may be used as 
necessary to maintain continuous power during launch pad anomalies and/or transport. Battery 
power is used to ensure continuous power whenever the payload is installed within the vehicle. 

6.8.1.2 Launch. The vehicle operates on internal power from just prior to umbilical ejection 
until the fairing (nose cone) is separated during powered flight. The launch phase power budget is 
limited to ensure sufficient battery power is available to: 1) maintain safe vehicle/mtemal 
operations for at least 2 hours after umbilical ejection, 2) execute a first opportunity emergency 
recovery of the vehicle in the event of a total array failure, and 3) safely recover the vehicle and 
payload if the aft solar array is operable. Although ground commanding will normally be used to 
control the power load under emergency conditions, autonomous load shedding will occur as 
necessary to save the vehicle. 

6.8.1.3 On-Orbit. The vehicle normally operates under solar array power with battery 
supplement for low array power or high load conditions. Although the vehicle is capable of 
operating in the closed configuration, a minimum deployment of the DM that allows full power 
operation is considered the normal operating mode. Each module acts as an independently 
powered vehicle with full bus control and battery operations. External control (e.g., automatic 
load shed) is exercised by a processor in the GNC computer in each module. The primary power 
sources are the solar array for the DM and the DM for the MM. Redundant battery systems 
provide full battery backup at all times. 

6.8.1.4 De-Orbit. Sufficient battery power must be available prior to the initiation of de-orbit 
to maintain the required vehicle and payload operations up to at least 2 hours after landing. Vehicle 
operations should be organized to permit trickle charge from the aft array up until the main bum is 

initiated. 
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6.8.1.5 Reentry. The vehicle and payload will operate on internal battery power throughout 
reentry. 


6.8.1.6 Recovery. There must be sufficient battery power available at landing to operate the 
vehicle/payload up to 2 hours until GSE power can be provided. 

6.8.2 Requirements 

The key RRS power requirements levied in Paragraph 3.3.2 of the RRS SRD are 
summarized below. However, other than the implication that greater power may be required by the 
PM, neither these nor the more detailed requirements in the SRD significantly drive the design. 
The real drivers are the power required by the PM (Table 6.8-1) and the power subsystem reliabi- 
lity required to meet the public safety and animal welfare (SRD 4.2.3.2, 99% probability of healthy 
recovery) requirements. 


Table 6.8-1. Power Trade Summary 


System 

Weight 

(lbs) 

Savings 

(lbs) 

Volume 

(ft 3 ) 

Pros 

Cons 

Li/(CF)x Battery 

817 


11.6 

• Easy Spin Balance 

• Replacement Costs 

• Thermal Impact 

Fuel Cell With 
Cables 

508 

309 (rodents) 

24 

• Weight Savings 

• Thermal Impact 

• Volume for Consumables 



189 (other) 



• Water Storage Tank Mass 

Solar System 

460 

351 (battery) 
48 (fuel cell) 

5 

• Lowest Volume 

• Weight Savings 

• Reliability 

• Low Development Cost 

• Spin Balance 


The SRD specifies no basic architecture for the RRV power subsystem other than there 
must be an internal power source available "for some prelaunch, launch, flight, recovery and post- 
recovery operations." The RRV is required to provide 45 kWh of 28 Vdc power to the PM from 
prelaunch through post-recovery, with the PM responsible for any power conditioning beyond the 
basic bus. However, the SRD cautions that "These power requirements are a lower limit and 
higher power levels should be studied." 

The following derived requirements were equally critical in determining the preliminary 

design: 
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magnericfie^^u^dentl^^o^eate^di^turting forceXchCuTdexc^ The lo^c 
SC' ^ rCqUire ^ control activity C undw Z le? 


6.8,3 Trade Study Summary 


The most critical trade study for the power subsystem was not the power study itself but 
the analysts of the PM required power. These studies indicated that in actuality, the RM 
requtrement for a 60-day mission (See Section 6.2) is almost a factor of 2.5 higher than the 
required 45 kWh, the EBM payload would be over a factor of 3.5 higher, and materials processing 
pro a y even higher, making the use of consumable energy sources (batteries or fuel cells) 

VlfhlOlK; itvmAoneUlm ' 


The power subsystem trade studies did. however, investigate the use of batteries 
tec argeable and single use), fuel cells, and solar anays as the primary power source. The solar 
array assessment included the use of a 12 degree-of-freedom simulation that modeled both the 
vehicle geometry/dynamics and the thermal effects on solar cell performance. Since the SAIC 
vehicle configuration has extensive areas available for body mounted solar cells, the solar array 
based system was the obvious design choice (Table 6.8-1) in terms of weight, reliability, and 
power availability for just the biological payload requirements. 


The final design has evolved well beyond the initial trade study, and the use of the solar 

amy clearly eliminates a major mission limitation. With the addition of the aft anay, the minimum 

RRS capability for fractional gravity operations provides sufficient margin for the basic 

biolog.cabbotan.cal payloads (Table 6.8-2), 30 to 50 percent (orbit dependent) margins for the 

worst case microgravity missions, and greater than 65% margin for Sun-synchronous microgravity 

operations. This represents approximately an order of magnitude greater power availability than 

the basic SRD requirement without major design impact without optimizing the arrays for 

maximum output or projecting the use of advance cell technology that could increase output by 
another 30 to 100 percent. 
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Table 6.8-2. Power Subsystem Interface Support 



The other major power design trade consiH^H <•» i tor42f/32 

transmission, with emphasis on the full 100 foot tri ^ mCanS ° f DM ' MM P ower 

potentially high payload power levels a fail • ^ eXtenSK>n ‘ At this Ie ngth, and at the 
field interaction Lgatio^ “ ~ ““ * « 

(HVDC). Shielding, the nse of !• “" ° f «— « 

frequeney three-phase approach described L this J2T T' ° Pn ° nS ’ ““ ° f ‘ he high 
transmission bus should be adequate for all miem • ChOSe "' How(!vc, '• a n °nnal 28 Vdc 
Ihc initial missions currently included in the RMOAD^^ ^ ' * ardflc ' al gravil >' >™ssions, 

6.8.4 Baseline Description 

The RRS power system is configured to ■» 
panels, which will be mounted on the Deployed Module (DmT “T* ° f e " ergy fr ° m 
These panels have sufficient capability to nm h .. ( M) ’ “ lIIustrated In Fi gure 6.8- 1 . 

-“a— 

reqmred for operation during ascent eclipse reenuw . ° f the WOrs, ‘ case «Nt Power 

taneries, capable of supplying 2 kilowatt hours of Irgy^ 2 kT^ h" nfck ^ ydr0ge ” 
redundant backup. The power subsystem is consists of- ° f " CTgy aS 
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• Solar Panel Interface (Bus Voltage Limiter). 

• Primary and Backup Battery Discharge Controller. 

• Primary and Backup Battery Charge Controller. 

• Power Distribution Unit 


* 28 V DC to 3-Phase 220 V - 20 kHz Converter. 

• 3-Phase 220V - 20 kHz to 28 V DC Converter. 


• Ground Support Equipment (GSE) Interface. 

• Computer I/O Interface. 



AFT PANEL 


FORWARD 

PANEL 


Figure 6.8-1. Deployed Module With AFT Array Dimensions (Inches) 

Four 16-cell, 52 amp-hour, 24-volt nickel/hydrogen batteries are located in the RRS. One 
battery in each module serves as the main battery supply for that module, and a second battery is 
provided as a backup in the event of a malfunction. Each battery is capable of storing 1 kWh of 
energy. The batteries selected are manufactured by Hughes, and will fly on the All spacecraft. 
Triple redundancy is achieved by allowing power transfer between the MM and DM via the 
Astromast so that a battery on either module can support the RRS during a fault condition. These 
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batteries are sized to power the RRS during launch, reentry, and eclipse 
accommodating three orbits and descent under emergency conditions. 


and are capable of 


Two sets of solar panels are mounted on the DM. The forward array consists of 

(F^TreTs'r^ B 5 T ^ ^ Ce " S ’ ^ ^ * ft P 3 "' 1 is a PP roxta «ely 25 square feet, 
OF gune 6.8-1). Because the aft panel is subject to reentry aeroheating backface loads, this aft panel 
may require replacement after each mission. P 


Cabling in the three Astromasts serves to provide power, ground, and MIL-STD-1553 
Avon, cs Bus interconnections between die MM and DM. The copper beryllium retraction ribbon 
contained in each of the Astromasts serves to transfer power between the MM and DM The 

Astromas, will contiun the necessary sliprings a. bod, ends of the beryllium copper cable to transfer 
the 3-phase power between the MM and DM. 

Deolov^r bl<>Ck <iiaSram ° f ‘ he RRS P ° WCT SyS ‘ em “ SlWW " in Fi *“ re The 

Deployed Module power subsystem contains two niclcel/hydrogen batteries, two solar areays, 

ery isc arge controllers, battery charge controllers, and nine bus voltage limiters. The MM 

also contains two nickel /hydrogen batteries, battery charge controllers, and battery discharge 

contro ers. e controllers and batteries in the MM are identical to those used in the DM Three 

Astromasts cables serve as both a backup mas, redaction capability and as die means for electrical 

connection. All electronics are fully redundant High, -tested hanlware, with the exception" 

phase electrical connection between die DM and MM. Hie 3-phase cireuits are considered to be 
current nonchallenging technology and are implicidy fail safe. 

6.8.4. 1 Load Characteristics 


Table 6.8-3 lists the Main Module and Deployed Module power requirements. Mission 
average power (Artificial Gravity) is 199.6 wans divided almost equally between die MM and DM 
The requirement ,0 supply a 200 wan average power to the bus for three orbits under a fault 
condition would require (200 wans by 96 min/orbi, by hour/60 min by 3 orbits) 960 wan-hours 
mil i, selection ofabanety with a 1 kWh rating will ensure power availaWlity. Sufficient cireur"' 
as been provided to allow for computer control of die loads. Load control will include power 
switching to shed individual loads. Monitoring will include bod, load current and load voltage. 
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permanent 



Figure 6.8-2. Power System Schematics 
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Table 6.8-3. Main Module and Deployed Module Power Budgets 


UNIT 

MAIN MOOULE 

PAYLOAD 
LIGHTS 
FANS 

WASTE FANS 
VIDEO 

DATA HANDLING 

SENSORS 
IMPLANTS 

ACTIVITY MONITORS 
PAYLOAD SUB TOTAL 

THERMAL PUMP 
IMU 1 

COMMAND CONTROI I Fn 
SUB TOTAL 
JHANSMISSIQN LOSSES 

DEPLOYED MOOULE 

propulsion 
COMPONENT HEATERS 
MAIN VALVES 
ACS VALVES 

jMAST AND CABLE MOTORsI 

MAW COMPUTER 
MEMORY BOARD 

TTAC DATA MOOULES 
TRANSMITTER 
RECEIVER 

TORQUE RODS 
MOMENTUM VM-EELS 
GPS RECEIVERS 
ELECTRONICS 
IMU 2.3 

SUBTOTAI 


TOTAL 
MARGIN 10% 

GRAND TOTAL 


POWER 

(WATTS) 


54.0 

6.0 
12.0 
16.0 
20.0 

30.0 

18.0 

10.0 


10 . 00 % 


10.00 

252.00 

112.00 


25.00 

10.0 

68.50 

30.50 

17.50 

2.70 

4.40 

10.00 

10.00 

28.00 


DUTY 

CYCLE 


0.630 

1.000 

IE-01 

4E-03 

1.000 

0.250 

0.250 

0.250 

1.000 

IE-02 

1.000 


0.000 

|4.05E-05| 

2E-03 


105.00 1 2.ME-04 


1.000 

1.000 

I 0.100 
l 4E-02 
1.000 

0.000 

1.000 

1.000 

1.000 

IE-02 


MISSION 

AVERAGE 

POWER 

(WATTS) 


8.8 


0.0 

IE-02 

2E-01 

3.0E-02 

25.0 

10.0 


60 DAY 
BUDGET 
(KWHRS) 


12.7 


0.0 

IE-02 

3E-01 

4.4E-02 

36.0 

14.4 


DUTY 

CYCLE 


0.63 

1.00 

IE-02 

4E-03 

1.00 

1.00 

0.10 

1.00 

1.00 

SE-03 

1.00 


0.00 

4.05E-05 1 
9.6SE-05 1 

1.2E-04I 

1.00 
1.00 


MISSION 

AVERAGE 

POWER 

(WATTS) 


8.8 


0.0 

IE-02 

IE-02 

3E-02 

25.0 

10.0 


6.9 

1.2 

17.5 

9.9 

1.8 

25.2 

0.100 
4E-02 1 
1.00 

6.9 

1.2 

17.5 

m 

■ 

m 

1.00 

0.00 

1.00 

1.00 

5E-03 

1 2.7 

0.0 

9.0 

10.0 
0.3 

82.6 

mi 


|| 

■QQ 

ISFII 

J 

287.4 

1 



60 DAY 
BUDGET 
(KWHRS) 


0.0 

1.5E-02 

1.6E-02 

4.4E-02 

36.0 

14.4 


258.2 

24.6 

282.8 
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SAIC has performed a detailed analysis of the power generated by the solar panels, as a 
function of solar irradiance, and solar panel temperature over the anticipated orbital missions. 
Figure 6.8-3 shows the maximum sustainable continuous power load that the solar power system 
can handle in the microgravity mode when the spacecraft attitude is perpendicular to the plane of 
the ecliptic. 

The power generated in the worst case artificial gravity mission, (a 350 kilometer circular 
orbit) is more than adequate (over 10% margin) to supply the Payload Module and all RRV 
systems as shown in Figure 6.8-4. In the Artificial Gravity mode, the spacecraft is spinning about 
its center of gravity with the spin axis perpendicular to the orbital plane. The "worst case," in this 
instance, specifies a transient 0 degree ascending node orbit during vernal equinox. This orbit 
describes the worst geometry for power production due to the incidence angle of the solar radiation 
on the solar array. The 900-kilometer orbit has a greater power capacity than the 350-km orbit due 
to the shorter Earth occultation. 

The Sun-synchronous orbit, while having a constant 90-degree angle between the 
ascending node and the Earth-Sun vector, is included here to illustrate the power system 
performance during the worst case thermal environment. This orbit describes the case in which the 
solar array receives the most heating, and thus a corresponding drop in solar cell electrical 
production. It is clear that the improved solar incidence geometry of the Sun-synchronous orbit 
outweighs the performance penalty of the increased thermal heating. 


MICRO GRAVITY MISSION 



Figure 6.8-3. Power Generation Capability for a Gravity Gradient Mission 
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ARTIFICIAL GRAVITY MISSION 



Figure 6.8-4. Power Generation Capability for an Artificial Gravity Mission 

The microgravity thermal roll is a 0.14 rpm rotisserie-type rotation around the long axis. In 
the artificial gravity mode, there is no thermal roll to prevent stabilization problems. The artificial 
gravity rotation itself provides a certain amount of thermal cooling because all sections of the array 
are able to give off some deep space re-radiance and no sections are continuously staring at the 

Sun. The exception to this is the Sun- synchronous orbit which experiences higher operating 
temperatures. & 

Artificial gravity maximum power load, Figure 6.8-4, is the same format as the micro- 
gravity chart, except for the spinning artificial gravity flight mode and the lack of thermal roll. The 
artificial gravity spin mode is a 7.0 rpm rotation around an axis through the midpoint of the 
Astromasts and colinear with the cross product of the position and velocity vectors. The lower 
performance of the artificial gravity case versus the microgravity case is due primarily to the worse 
incidence angle of the solar radiation on the array. The Sun-synchronous orbit, while thermally 
hotter, still has a high maximum power load capability. 

Array performance. Figure 6.8-5, charts the array electrical production during a single 
artificial gravity spin in a 350-km orbit at the worst case ascending node transient. The heavier line 
at top is the total array performance, the sum of the forward and aft arrays' performance as shown. 
The straight, horizontal line is the 215 watt continuous power load supplied to the spacecraft. The 
large margin between the array output and the load is necessary so that sufficient power may be 
stored m the batteries to power the spacecraft during the passage through Earth shadow. 
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Figure 6.8-5. Array Performance Profile Per Rotation Artificial Gravity/Worst Case Orbit 


Battery performance - For the same mission as the array performance chart, Figure 6.8-6 
profiles the drain/charge characteristics for the entire orbit starting with the beginning of occulation. 


6.8. 4. 2 System Components 

6.8.4.2.1 Solar Panels. The solar arrays mounted on the DM consist of approximately 51.5 
square feet of GaAs cells mounted to the skin of the DM, and approximately 25 square feet of 
GaAs cells mounted on the aft structure. This provides a minimum of 225 watts of sustainable 
power at 28 volts available for Artificial Gravity missions. The cells used in the solar panels will 
be GaAs cells, 4 cm x 4 cm. Panel interconnections consist of 45 cells in series ~32V. Sufficient 
circuitry will be provided to allow for computer monitoring of the solar panel parameters. 
Monitoring will include: 

• Monitoring of each panel segment current 

• Monitoring of each panel voltage. 
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Figure 6.8-6. Battery Cycling Profile Artificial Gravity/Worst Case Orbit 

Bus voltage limiters will be capable of shunting solar panel strings to ensure maximum bus 
potential is held to less than 31 volts. Suitable electronic power switching capability will be 
provided to shed individual solar panel segments in order to support +28 V bus regulauon, and wi 
serve as an aid to fault isolation and management. 


«.8.4.2.2 Batteries. Four 24-volt batteries (Figure 6.8-7) are located in the RRS, two in t e 
DM and two in the MM. One battery in each module serves as the mam battery supp y or at 
module, and a second battery is provided as a backup. Each battery is capable of stonng 1 kWh of 
energy Rechargeable 1 kWh nickel/hydrogen batteries were selected to accommodate t e 
operational mission of launch, deployment, eclipses, and recovery. The selected battenes are 
24-volt nickel/hydrogen batteries, comprised of 163-1/2 inch cells, manufactured by Hughes. The 
nickle hydrogen cells selected for die RRV have energy capacity which is relauvely.nsensmve m 
thermal variations. Measured data on four cells over a temperature range of -12 C to 29.4 C is 
presented graphically in Figure 6.8-8. Over this range, cell capacity decreases at less than 0. 

percent per degree C. 
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Figure 6.8-7. Nickel Hydrogen Battery Cell 



TEMPERATURE (CENTIGRADE) 

Figure 6.8-8. Cell Energy Capacity Versus Temperature 
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The BCC will have the following operating modes: 

a. Eclipse Mode. During eclipse, the BCC operates in standby mode. Battery charge 
current will be zero and the total BCC standby power losses will be less than 2 watts. 

b. Automatic Charge Control Mode. 

1 . Hi-rate Charge - Upon exiting eclipse, the BCC operates in Hi-rate charge mode. 
Hi-rate charge current is defined as the combination of the hi-rate charge solar array 
current and trickle charge solar array current, about 9.6 amperes maximum. Hi-rate 
charge mode will be terminated when battery cell pressure exceeds the preselected 
pressure setpoint, as defined in Table 6.8-4. 

2. Trickle Charge - When battery cell pressure reaches the preselected pressure 
setpoint, hi-rate charge will be terminated. Only trickle charge panel current will 
then be supplied to the battery to maintain a full state of charge. 

c. Manual Charge Control Mode. Automatic charge control can be overridden and 
hi-rate charge or trickle charge can be selected by ground commands. 


Table 6.8-4. Selectable Battery Cell End-of-Charge Pressure Levels 


Level 

Address 

Battery Cell 

Pressure 

(psi) 

0 

0000 

375 

±3 

1 

0001 

398 

±3 

2 

0010 

421 

±3 

3 

0011 

444 

±3 

4 

0100 

467 

±3 

5 

0101 

490 

±3 

6 

0110 

513 

±3 

7 

0111 

536 

±3 

8 

1000 

559 

±3 

9 

1001 

582 

±3 

10 

1010 

605 

±3 

11 

1011 

628 

±3 

12 

1100 

651 

±3 

13 

1101 

674 

±3 

14 

1110 

697 

±3 

15 

ini 

720 

±3 


The two BCCs (primary and redundant) in each module are packaged together to form one 
unit. As shown in Figure 6.8-10 the primary BCC is identical to the redundant BCC. Charge 
current flows from the solar boost array to the battery through relays and a current shunt resistor. 
There are two modes of charging: high rate charging and trickle charging. During high rate 
charging, the main charge relay, high rate charge relay, and trickle charge relay are closed, 
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Figure 6.8-10. Battery Charge Controller Block Diagram 
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Figure 6.8- 1 1 . Housekeeping Power Supply 
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Figure 6.8-12. Strain Gage Amplifier 

Battery Pressure Monitor Circuit. The circuit shown in Figure 68-13 allows 16 
different battery pressure set points to be selected by ground commands via a digital to 
analog convener When information from the strain gage amplifier indicates that the 
battery pressure has reached a preselected level, a comparator* trips 

press^to faU g ?5± mi ? C hys ! eresis is Provided which allows the battery 

pressure to fall 15 ± psi before high rate charge is resumed. y 

Current Sensor. The current sensor shown in Figure 6.8-14 is a current to V o1ra<~ 

thm!?^ t provides . batter y charge cureent telemetry information. Charge current 
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Figure 6.8-13. 


Battery Pressure Monitor Circuit 
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Figure 6.8-14. Cuirem Sensor 
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Table 6.8-5. Battery Charge Termination Options 


Charge Termination 
Method 

Ampere-hour integrator 
Absolute voltage level 

Temperature-compen- 
sated controlled voltage 

Advantages 

Disadvantages 

Scheme 

Proven design 
Overcharge is controllable 

Require precise control at low temperature 
High degree of temperature sensitivity 
Complex electronics needed 

Proven 

Yes 

Temperature sensors inexpen- 
sive, reliable, and proven 
| Stable on-off control 
Inexpensive electronics 

Requires tight temperature range 
(-10° to+10°C) 

No 

None 

Laboratory experience 

• Works at cold temperature only 

• Difficult to establish set point 

• Unstable 

No 



Complex electronics needed 
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•) BATTERY PRESURE TELEMETRY ACCURACY 


b) PRESSURE SETPOINT ACCURACY 



Figure 6.8-15. BBC Telemetry Accuracy Over Temperature 
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Figure 6.8-16. Battery Discharge Controller 
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Figure 6.8-17. 


gle Battery Discharge Controller String Functional Block Diagram 
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Figure 6.8-18. Housekeeping Power Supply 

b. Startup (Soft Start) Circuit (see Figure 6.8-19). When either string is 
commanded on (enable), two magnetic latching relays will close. If the bus was zero at 
the moment the unit was enabled, one of the magnetic latching relays connects the 
battery directly to the bus. When the bus voltage reaches 14 volts, the housekeeping 
power supply will provide power to the regulator control. The regulator control will 
slowly allow the pulse width modulator SG1526J to phase up. When the SG1526J 
phases up, it is allowing the very narrow pulse to slowly get wider, until the output 
reaches its regulation set point. At 26.5 volts bus the SG1526J will then maintain the 
appropriate pulse width to sustain regulation. 

The soft start is occurring as Cl charges through Rl, allowing pin 4 of the SG1526J to 
slowly rise. This permits the SG1526J to phase up until output regulation is achieved. 

c. Steady State Operation of Power Output Stage. The power stage is a boost- 
add converter. With the power output magnetic latching relay closed, there is a direct 
connection from battery to output bus through the output boost transformer utilizing 
Schottky output diodes. At both ends of the boost transformer are four parallel 
IRH150 MOSFETs that function in a push and pull action prompted by the SG1526J 
pulse width modulator (PWM). An error amplifier initiates a chain action to the PWM 
that drives a (totem pole) bipolar transistor which charges the four MOSFET gates in 
parallel. With the MOSFETS turned on, the auto transformer action boosts the battery 
voltage to twice its voltage. The boosting action charges the output capacitor bank 
through one diode and the output choke, until the output reaches the regulation setpoint 
sensed by the error amplifier. The PWM sensing the output voltage in regulation will 
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Figure 6.8-19. Soft Start Circuit 

™;r:rrn 

reference. To ntain^ro^I^^TTr^ ^ “ * 

pins 1 1 and 14. Each push and puU signal from the PWM fr auachT^ "* P “ S h ““ P “" ^ “ 
turns the MOSFETS on. To turn the MOSFETS off rh h • • ^ ^ transistor that 

bipolar to rapidly remove the charge from all four gates' J " I'™’™’ CaUSi " g 3 PNP 
falling edge of the SO 1526J at pins Band 16. More specific”' ” ^ 


6.8-25 





PULSE WIID - 
WODULATOI 
SGI 526 





SGI 526 


PULSE WIDTH 
MODULATOR CLOCK 



PULSE WIDTH 
MOOULATOR PHASE A 
(TOTAL MODULATION) 




mum 


PULSE WlOTH 
MODULATOR PHASE B 
(TOTAL MODULATION) 


1 11 


fet drive 

PHASE a 


-T 


FET DRIVE P L 

PHASE B 1 


Figure 6.8-22. Timing Diagram 

a Current Limit Circuit. The current limit circuit is activated to prevent scnous 
damage or stress to BDC components if for any reason the spacecraft load shouldbe 
exceeded. The manner in which the current limit is achieved is by the primary current 
transforming action. This current transformer is center tapped to power return which 
generates to the secondary winding that is rectified by turning on a transistor 
producing a voltage proportional to the primary winding current across a l sense resistor 
The two primary halves of the transformer are attached to each group of MOSFET 
common drain connection providing the push and pull reset action of the P n ®^T- 
Each half-cycle of the primary winding has the total current that passes through the 
MOSFETS. The secondary voltage setpoint is selected to a safe operating current level 
of 50 amDeres for the MOSFETS in parallel. When a high ament level is reached, the 
r^tifi^^Uage at the secondary will shut down the SG1526J (PWM) each half-cycle 
thauhe output bus load is in excess. To provide some noise immunity, *e current 
setpoint threshold was elevated to +5.2 volts. When the BDC is in current limit mode, 
the output voltages will collapse as the load is increased. The output vo age wi 
riowly decrease from the regulation setpoint to the input battery voltage as the load is 

varied. 

If there is a hard short on the bus requiring current to be in excess °f 75 a^res f or >l 
nsec the BDC will no longer control every half-cycle. After detecting this high 
current, the PWM will shut down for 6 to 10 seconds, allowing the battery to clear the 
short. Following this, the BDC will soft start again (assuming the fault was cleared). 

b Output Diode Fault Detect Circuit (see Figure 6.8-23). The fault current 
shutdown circuit detects currents that can be excessively high due to an output Schottky 
diode short. This abnormally high current will also produce a signal across a shunt 
resistor, opening the output and housekeeping relays, turning the BDC ott. 

c Overvoltage Protect (see Figure 6.8-24). The overvoltage protect detects when 

the output voltage is above the unit specification, not to exceed 35 volts. Because the 
BDC is always turned on and attached to the bus, the only time a BDC will shut down 
is when it produces the high voltage on the bus. 
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This circuit has two comparators with their outputs connected. If both comparators are 
high, the output relay will open turning the BDC off. One comparator detects whether 
the output voltage is excessively high and the other comparator detects whether the 
push and pull power MOSFETS are functioning. The reason for two detectors is that 
because there are two BDC strings functional at all times, the string that is generating 
the high output voltage is the one to disconnect from the bus. If an external source 
should cause the bus to rise above the BDC set point, then neither string would respond 
and disconnect from the bus. Both would remain in standby mode for either eclipse or 
a transient load. 


d. 


e. 


Relay Contact Protection. Each power output relay has two contact snubbers: one 
is connected in reverse parallel of the other to accommodate either of two failure modes. 
One snubber network functions when the BDC source is greater than the bus as 
described during overvoltage shutdown. The other snubber network functions when 
the bus is greater than the BDC source described during the output diode fault 

shutdown. 

Battery Reconditioning Resistor Circuit. The battery reconditioning resistor 
circuit is a resistor network that can be attached across the battery on command through 
the telemetry and command link. 

The 14.0 ohm load is a series parallel combination that can be connected to the positive 
terminal of the battery through two relays. K1 and K2 are wired to be connected if 
both relays are either in the upstairs or downstairs position. Each relay can be 
commanded separately providing redundancy; should one relay fail to respond, then the 
operational relay can enable to disable the load resistor. 

The load is a network of 14.0 ohms for each resistor with four parallel strings with four 
series resistors in each string. This network provides minimum variation in the 
discharge current in the event of a single failure of one resistor opening or shotting, 
with a minimum amount of components. 


To enable reconditioning load resistors, both the BATT RECOND A STATUS and 
BATT RECOND B STATUS must be of the same digital logic, either 0 or 1. 


f . Telemetry Circuit. Each BDC string has telemetry outputs to indicate the status of 
the housekeeping power supply, power bus relay, reconditioning load, spin bus 
voltage with battery voltage and current 

The battery voltage and spin bus voltage will have two separate resistor networks, each 
with a single output for redundant analog telemetry monitoring. 

BDC A and BDC B each has a current sensor with a single analog output for 
monitoring each, if both BDC sections are enabled. 


g- 


Battery Current Sharing Circuit (see Figure 6.8-25). The pupose of the 
battery current sharing circuit is that if two separate BDCs are to regulate a commo 
bus, each BDC will maintain equal battery discharge current. Each BDC compares its 
discharge current with the other BDC, varying their output voltages slightly within the 
voltage regulation limits to equalize the battery currents. 
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There is redundant circuitry to provide the above except there are three components that 
are used equally between the two strings. They are: components tnat 


• Individually fused capacitors in the input capacitor bank. 

• Individually fused capacitors in the output capacitor bank. 


l iSChar !f curren tshunti S common to the input of both strings. Because 
o the unique construction of the shunt, it is believed it will never fail short Ten 

aUe re ^ reSent desired resistance - ff any one shunt fails open, the 
resulting resistance is adequate to meet the unit requirements F 


6.8.4.2.5 Bus Voltage Limiter. Nine bus voltage limiters, packaged three limiters per 
assembly, regulate the output voltage of the solar panel. Each limiter is connected to regulate 21 or 
22 parallel strings of solar cells that are equally spaced around the circumference of the solar panel. 
Each limiter acts as a shunt load on 27 of the 45 series cells in the solar cell strings. They will 
shunt their respective strings current capability between 0 and maximum (i.e., short circuit current) 
as a function of load and solar panel temperature conditions. The limiters are designed with 
staggered setpoints so that they will operate in steps and thus reduce power dissipation. This 
overlap also reduces perturbation on the regulation curve caused by the failure of one limiter 
(without the overlap, the regulation curve would follow the shape of the unregulated solar panel 
during a failure). Initial limiter action begins at 29 volts, thereby ensuring full panel capability at 
the nominal 27 volt operation point Each tap regulates another 95 mV as the solar panel potential 
increases, with the final setpoint being 30.615 volts. This ensures that the maximum bus potential 
is held to less than 31 volts (during natural environments). Each limiter has redundant fuses which 

are connected in series with the solar panel tap to protect against excessive tap current due to a 
shorted diode on the solar panel. 


Three limiter circuits are packaged together to form a bus voltage limiter unit. The setpoints 
are staggered so that no two limiter circuits in the same unit will be in the active region at the same 
time. As a result, the thermal design of the unit is simplified, since the maximum power 
dissipation will be limited to the maximum power of a single circuit in the active region plus the 
power of two circuits fully saturated. Each limiter consists of an error amplifier, a driver, and a 
Darlington output stage. The three parallel npn transistors have 0.2 ohm emitter resistors to force 
current sharing. These resistors also form part of a current feedback network. The purpose of this 
current feedback loop is to make the transadmittance of the limiter less dependent on the gain of 
active devices and, therefore, more predictable at BOL and more stable with age. In addition, as a 
minor loop, it simplifies the stability problem for the major loop. 
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Figure 6.8-26 shows a detailed schematic of the limiter circuit. The error amplifier function 
is performed by Q4A and Q4B. A fraction of the bus voltage obtained from the divider chain R24, 
R25, and R26 is compared with the voltage of the temperature-compensated reference diode VR2. 
When the bus voltage rises above the setpoint for this limiter, Q4A turns on. This turns on the 
Darlington pnp pair Q2 and Q3, which turns on the npn driver transistor Q4, which turns on the 
Darlington connected shunt translators (the three 2N3599 transistors mounted on the chassis). 
Regulation is achieved as follows: 



Figure 6.8-26. Bus Voltage Limiter Block Diagram 

Chassis-mounted resistors (R7, R8, and R9) in the emitters of the shunt transistors develop 
a voltage across them proportional to the current being shunted out of the solar panel tap. This 
current feedback then controls the overall gain of the error amplifier via resistors R3, R4, R5, R12, 
and R17. If the shunt current becomes too large, then transistor Q1 turns on which shunts drive 
away from Q4, and turns off the shunt transistors. Telemetry is developed across the divider R1 
and R2, clamped to 8.2 volt maximum by VR2 and filtered by Cl. The rest of the circuitry is used 
for biasing and filtering of signals. 
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The bus voltage limiter package is identical to that used in F-5 (see Figure 6.8-27). It 
consists of six printed wiring boards (three identical bus limiter circuit boards and three identical 
relay driver boards). The current sharing resistors, drive transistors, relays and power shunt 
transistors are mounted on the chassis, which serves as an adequate heat sink for these components 
(the fuses and some bus filter capacitors are also mounted on the chassis). Two 37 contact 
Microdot push-pull lock and bayonet coupling connectors with different keying will be mounted as 
shown in Figure 6.8-27. J1 is used for power interconnections, and J2 contains commands, 
telemetry, and test points. Both the top and the bottom of the chassis will be open allowing 
maximum access for assembly, inspection, and repair. 


After assembly and initial checkout, the unit will be conformal coated, after which in- 
process testing will be completed. The unit will then be injected with low-density polyurethane 
foam, which is easily removed for repairs if necessary. The top cover is bonded onto the unit with 

silver-filled bonding material to minimize EMI effects. After the foaming process the unit will then 
undergo acceptance testing. 

6.8.4.2.6 Power Distribution Unit. The Power Distribution Unit provides the necessary 
EMI filters, fusing, and software controlled power switches needed to distribute the 28V bus 
power m each module (MM and DM) to their respective loads. Two identical sets are located in the 
RRS, two in the DM and two in the MM. Figure 6.8-28 details the block diagram for the MM, 

Figure 6.8-29 for the DM. Figure 6.8-30 details a concept for the fusing and software controlled 
power switching. 

The Power Distribution Unit will contain power conditioning circuitry to filter, switch, and 
fuse 15 branch circuits. The design of the Power Distribution Unit will be self redundant such that 
a single point failure will not cause a system failure. Table 6.8-4 details the switch, current and 
software controlled switch requirements for the MM Power Distribution Unit. Table 6.8-5 details 
this same information for the DM Power Distribution Unit 

Each branch circuit will contain an EMI filter capable of handling the currents specified in 
the peak current columns of Tables 6.8-6 and 6.8-7. In addition, the filter will be designed to meet 
the requirements to withstand the 30A clearing current needed to blow the safety fusing. A total of 
15 EMI filters will be required. 
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Figure 6.8-30. Concepl for Software Controlled Switch 


Table 6.8-6. Main Module Power Disrobe, ion Switch Requirements 


No. of 


S/C Command Corn 


S/C GPS Receiver 


S/C Dual Init Squibs 


S/C Motor Mast 


S/C Total No. of Switches 


Switches j Wattage 


Peak 

Current 


Peak Current 
Per SW 
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Table 6.8-7 . Deployed Module Power Distribution Switch Requirements 



No. of 
Switches 

Peak 

Wattage 

Peak 

Current 

Peak Current 
Per SW 

DM Component Heaters 

1 

10 

0.36 

0.36 

DM ACS Valves 

3 

616 

22.00 

7.33 

DM Mast Motors 

0 

45 

1.61 

0.00 

DM Main Computer 

3 

25 

0.89 

0.30 

DM XMTR/Receiver 

2 

28 

1.00 

0.50 

DM Torque Roads 

2 

2.7 

0.10 

0.05 

DM Momentum WHL 

6 

3 

0.11 

0.02 

DM GPS Receivers 

3 

10 

0.36 

0.12 

DM Electronics 

2 

9.5 

0.34 

0.16 

DM IMU 

3 

40 

1.43 

0.48 

DM Pyro 

2 

N/A 

10 

5 

DM Total Number of Switches 

27 





Figure 6.8-28 illustrates the power distribution of the MM Power Distribution Unit. Figure 
6.8-29 depicts the power distribution of the DM Power Distribution Unit. The 28 V bus is 
connected to each channel via a redundant set of safety fuses that are sized to allow for clearing in 
the event of a short, i.e., sized just small enough to allow the battery to clear the fuse in the event 
of a short. The fuse output is than fed through a self-redundant EMI filter used to prevent 
interference between power loads to a self redundant power switch. The current rating for the EMI 
filter shall be sufficient to allow for the transient flow of a fuse clearing current as well as the load 
current called out in Tables 6.8-6 and 6.8-7. A self-redundant computer controlled switch is 
provided. The design of this switch is such that a single short or open will not interfere with proper 
circuit operation. The circuit actuation is to be provided from four redundant discrete output lines 
from the computer. 

6.8A2.7 Tri-Mast Power Transfer Unit. The three Astromasts will provide power, 
ground and MIL-STD-1553 Avionics Bus interconnection between the MM and DM. The existing 
copper beryllium retraction ribbons will transfer power between the MM and DM. This allows the 
solar cells in the Deployed Module to charge the the Main Module’s batteries, the transfer of GSE 
power to reach the MM, and creates a triple redundant battery system. The use of 3-phase 220 V - 
20 kHz power transmission was chosen to meet the following objectives: 

a. AC transmission prevents interaction between the Earth’s magnetic field and cable 
current from producing any force on the RRS. 
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b. Three-phase transmission provides fault protection in the event of a electrical break in 
any of the Astromast power paths. In addition, it reduces the size of the filtering 
components needed to convert AC to +28 V DC. 

c. A 220 V transmission voltage was chosen to ensure that the worst case current flow 
through the Astromast cables will be less than 1 ampere. This will ease the voltage drop 
due to cable resistance and cable currents through the Astromast. In addition, this will 
allow downsizing of the Astromast sliprings. 

d. The 20 kHz frequency was chosen to keep component size down. Smaller core sizes 
and smaller filter capacitors will be required. 

Redundant software controlled 28 V to 3-phase 220 V - 20 kHz choppers provide a means 
of transferring power via the Astromasts. The chopper circuit shall be actuated by four discrete 
lines from the computer. In the enabled state the output on each of the 3-phase output lines will be 
a 20 kHz square wave having a peak voltage of 220 V. In the disabled state, the output will be in 
an open state. The chopper circuit will be capable of suppling a 3-phase AC output having a 200 V 
±4 V square wave output at a maximum output current of ±2.1 A. The rise and fall time for the 
square wave output shall be 5 microseconds ±1 microsecond. The MM output shall be connected 
in the "Y" configuration, and the DM connected in the delta configuration with the common line 
connected via instrumentation cable ground return. 

The design of the chopper output circuit will be such that a failure of any one device shall 
not cause the failure of the chopper. A TTL logic low on any of three of the four discrete input 
lines will cause the chopper to be in the actuated mode, i.e., provides 3-phase 200 V at 20 kHz. A 
TTL logic high on any three of the four input discrete input lines will cause the chopper to be in the 
third state, high impedance mode. In this mode, the output impedance will be at least 100 K ohms. 

Figure 6.8-31 illustrates how the use of 3-phase power provides circuit protection in the 
event of an opening on one of the three Astromast cables. Under nonfault conditions, the chopper 
output generates 3-phase 28 V peak square wave drive for the "delta" to "Y" step-up transformer at 
the left side of this figure. This transformer steps the 28 V peak drive to a 220 V peak square wave 
which is passed through the Astromast sliprings and cables. At the right side of this figure, the 
voltage is applied to the "delta" to "Y" step-down transformer where the voltage is stepped down to 
3-phase 28 V peak square waves. The peak-to-peak voltage at each tap of the right hand 
transformer will be 28 V. 
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Redundant software controlled 3-phase 220 V - 20 kHz to 28 v nr- 

“ — v - “ K 
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th . ? n Vh T . square wave having a peak voltage of 200 V to 28 V and delivered to 

an open state" “ ^ ^ ° f ^ AC to 28 V ^ converter will be in 

The 3-phase to 28 V Converter circuit will be capable of suppling 28 V DC a t in 

. PP ' . m glC OW °" any of three in P“‘ of <he four discrete input lines will cause the 

bus” h T Uattd ^ LC -' C0 " VCrt 3 ' PhaSe 200 V/2 ° kHz Power to 28 V power 

. . ... g ' C ‘ gh ° n any three of the four in P« discrete input lines will cause the chopper to 

be in the third state, high impedance mode. In this mode the 3-phase to 28 v k P 

impedance will be at least 100 K ohms. P V ^ P ° WCr ° UtpUt 

6.8.5 Command and Control 

The extemai control for the power subsystem process will be provided by redundant 
processors housed in the GNC computer in each module. The externa” controls i„c“ 
manual conftguradon/process control via ground command and automatic load shed operations 
Although the load shed priority is vehicle firs, and payload second, th. independent module power 
ofterattons allow the DM to operate in a vehicle safe mode with rite MM perfomting intend load 
ed operations to preserve payload integrity on battery operation. The GNC computers provide 
vrsibihty into the load shed operation and full ground override capability. 

6.8.6 Test 

Special testing is required for the power transmission system between the denloved h 

VerifiCad ° n ° f OPerad0 " d “ ng effidency «—> and 

6.8.7 Manufacture 


The power system shall be manufactured from off-the-shelf components. Assembly of the 
wer subsystem constats of installation of tire components (batteries, electronics, and solar anay 
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panels), wiring the component into the harness, and then performing continuity and performance 
checks and testing. No speciai manufacturing processes arc required. 

6.8.8 Refurbishment 

Refurbishment of the power system is performed after separation of the two halves of the 
deployed module. Battery inspection and recharge, performance check of all charge and discharge 
controllers, inspection of the solar cell strings, and a full functional test will be performed 
Inspection procedures shall include internal (for electronic boxes) and external (for batteries and 
boxes). Replacement of faulty assemblies and solar array panels shall be performed if faulty. 
Repair would be performed offline at the vendor facility. 
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6.9 Thermal Control Subsystem (TCS) 
6.9.1 Operations 


6.9.1 1 Prelaunch. The only cooling will be lion, the pad air conditioning flow around the 
veh.c e tns.de of the launch vehicle adaptor. The thermal subsystem must maintain the payload 
module within operational thetmal limits for an undefined time using the pad air conditioning flow 
around the heat shield for thermal rejection. 

6.».!.2 Orbital Flight. The thermal subsystem must operate on internal capacity from loss of 
pad air conditioning just prior to lift-off until the vehicle is separated from the launch vehicle 
a aptor. Dunng fractional gravtty operations, no rotation can be used for thermal balance other 
than that prov.ded by the gravitational rotation. Rotation may be used during microgravi.y 

operations, but cannot cause forces beyond the overall microgravity requirements. 

«.9.1.3 De-Orbit and Reentry. The thermal subsystem must be isolated from reentty 

eating and operate on internal capacity from just prior to the initial de-orbit thruster firings until 
one hour after landing. 6 

6 f h M 1 Re “ Ver5 '' The themwl subs >' sttn ’ able to operate indefinitely in the presence 

of heat shield and local environmental heat soak for an indefinite period of time when connected to 
external coolant support. 

6.9.2 Requirements 

The overall requirements of the RRS TCS are summarized in Table 6.9-1 These 

r— “ d the 1)68180 Refere °“ MiSSi0nS (DRMs) defiMd ear *y in the study, and shown in 
TaWe 6.9-2, were the only top-level groundrules and assumptions used in the thermal trade system 


6.9.3 Trade Study Summary 

The purpose of the RRS Thetmal Control Trade Study was to assess the design of the 
TCSs necessary maintain the temperatures of applicable RRS hardware within prescribed limits 
dunng on-orbit operations. Specifically, die repot, describes die efforts to define and verify TCS 
designs for maintaining die satellite's PM environmental eontrol system heat exchanger, propellant, 
and water supply within required temperature limits. 
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Table 6.9-1. Thermal Subsystem Requirements 

• ORBITAL FLIGHT 

- Initial 

- Dissipate 207 Watts in Stowed Position 

- Microgravity: 

- Dissipate 

• MM 131 Watts 

• EM 74 Watts 

- Artificial Gravity: 

- Dissipate 

• MM 131 Watts 

• EM 74 Watts 

• Keep Propellant Tanks Above 275° K 
Is Stressing Case 

S/C in Deployed Configuration in Flat Spin at 7 RPM 
in Plane of Orbit at Summer Solstice 

RECOVERY 

• De-Orbit Phase: 

- Same as Initial 
- Reentry Phase: 

- 168 Watts in Stowed Configuration With Thermal 
Soak in From Skin 

- Heat of Fusion Thermal Storage 

Terminal and Post Recovery 
- Same as Reentry 


Definition 

Parameter DRM-1 


Table 6.9-2. RRS Design Reference Missions 

Design Reference Mission Set 


DRM-2 


DRM-3 
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A review of the Ames RRS design study and a preliminary evaluation of the SAIC RRS 
configuration indicated that a liquid coolant loop, in conjunction with a space radiator, was a viable 
thermal control concept for the ECLSS heat exchanger. Ethylene glycol was identified as an 
appropriate coolant, and the vehicle aeroshell was determined to have sufficient radiative capacity 
for dissipating the anticipated PM heat load. 

A thermal-fluid response assessment of the fluid network and radiator was performed 
considering the proposed RRS orbits and vehicle orientations that subjected the aeroshell to the 
most thermally stressing environments. The analysis indicated that eight, 0.889 diameter coolant 
tubes, in conjunction with a coating of low absorptivity, high emissivity white paint on the 
aeroshell s surface, were adequate space radiator design measures for effectively cooling the 
ECLSS heat exchanger. The estimated power requirement for the subsystem is a continuous 7.4 
watts and the projected mass is 38.4 lbs (17.4 kg). 

A conservative assessment of the on-orbit thermal response of the RRS Extended Module 
indicated that the propellant housed within its interior should remain between 280 and 295 K for all 
anticipated RRS missions. Shielding the propellant tanks from direct extraterrestrial exposure and 
coating the exterior surfaces of the module's forward and aft covers with a high absorptivity black 
paint will maintain the propellant above its minimum allowable of 273 K. The thermal assessment 
of the Extended Module also indicated that an 0.14 rps vehicle axial rotation is necessary to 
alleviate excessive cell temperatures experienced by the module’s exterior solar array. The rotation 
induces accelerations below the maximum allowable of 10 5 g. 

The PM water supply tanks will experience radiant exchange primarily with the inner 
surface of the aeroshell substructure and the external surface of the PM cannister. Since the 
temperatures of these surfaces will fall between 281 and 291 K, which is above the 273 K 
minimum allowable, it was concluded that no active heating of the water will be necessary. 

6.9.4 Baseline Design 

This section documents the design and assessment work performed in defining the on-orbit 
TCS requirements for the RRS. Specifically, it describes the hardware and design measures 
necessary for maintaining the PM Environmental Control Life Support System (ECLSS) heat 
exchanger, the hydrazine propellant, and PM water supply within their required temperature limits. 
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6.9.4.1 Payload Module ECLSS Heat Exchanger Thermal Control Subsystem 

6.9.4. 1.1 Introduction. The RRV contains a complete ECLSS capable of providing the 
required atmosphere for sustaining 18 rodents, and a suite of related electronics and hardware, for 
up to 60 days. Within the PM, the air supply's humidity, chemical content, and temperature are 
monitored and adjusted continually. The humidity and content are controlled by subsystems 
completely internal to the PM. The temperature is maintained by regulating the flow of air through 
the ECLSS heat exchanger. 

During satellite launch, ascent, reentry, and recovery periods, the heat exchanger functions 
autonomously to cool the PM airflow through the incorporation of a fusible wax within its 
construction. The wax in the PM undergoes a solid/liquid phase transition at 278.8 K and the 
quantity contained the heat exchanger has been sized to provide 1055 kilojoules of thermal storage. 
This translates into approximately 3 hours of independent cooling capability. A complete 
description of the ECLSS heat exchanger design is provided in the SAIC RRS Payload Module 
Trade Study. While the satellite is in orbit, however, heat removal and consequent dissipation 
must be provided by a TCS coupled to the heat exchanger, but external to the PM. 

The heat generated within the PM is attributable to the rodents and electronics/hardware 
which produce, on average, 45 and 75 watts, respectively. The external TCS must, therefore, be 
capable of transporting and dissipating approximately 120 W of heat. In addition, the minimum 
anticipated PM air temperature is 291 K, which requires the TCS to maintain the PM ECLSS heat 
exchanger at or below this temperature. 


The Ames Reusable Reentry Satellite Design Study, confronted with a similar set of 
capability requirements, went a long way in identifying the character of a potential TCS. Two 
preliminary observations were instrumental in shaping the basic concept and defining the final TCS 
design. First, the RRS concept places maximum emphasis on the reusability of onboard 
subsystems and, therefore, an expendable TCS was not permissible. Secondly, the satellite’s 
geometry, in conjunction with the transient nature of the PM heat loads, did not bode well for 
passive TCSs. Therefore, it was concluded that an integrated, active TCS, consisting of a fluid 
network coupled with a space radiator, was the most efficient alternative. The SAIC RRS 
configuration is no exception to the above considerations, and this study addressed the design and 
corresponding assessment of a fluid network/space radiator TCS concept. 
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The concept for the heat ECLSS exchanger was developed based on the aeroshell as a 
space radiator. 

An assessment of the Extended Modnle's on-orbit thermal response indicated that a vehicle 
axial rotation rate of 0.14 rpm was necessary during the microgravity mode of operation. This 
requirement was imposed to alleviate the excessive temperatures experienced by the sun-facing 
portion of the module's solar array that resulted in a significant degradation in cell power 
production efficiency. Polar orbits, such as DRM-3, in conjunction with the microgravity vehicle 
orientation (no rotation in the orbital plane), resulted in the most severe temperature excursions. 
An axial rotation rate of 0. 1 4 rpm was found to effectively smooth the highly nonuniform heating 

about the module's circumference, consequently lowering the bulk temperature of the power 
producing portion of the solar array. 

This axial rotation rate was found to induce an acceleration of 0.8xl0' 5 g at a radius of 35 6 
cm, which is the maximum radius of the PM rodent cages. This acceleration falls below the 
maximum allowable level of 10 5 g set forth in the RRS System Design Study Statement of Work, 
Section 4.2.5.2 and is therefore acceptable. 


The resulting subsystem is presented in Figure 6.9-1. Coolant is pumped through the 
ECLSS heat exchanger and then distributed into one of two sets of cooling tubes, each spanning 
180° sections of opposing aeroshell circumference. The cooling tubes are integrated directly into 
aeroshell’s aluminum substructure. During transit, heat is transferred from the coolant to the 
aeroshell backface and then conducted to the aeroshell surface where it is radiated to the 

environment. The cooled fluid streams are then merged and pass through a reservoir before 
returning to the heat exchanger. 

A schematic of the complete ECLSS heat exchanger TCS is presented in Figure 6 9-2 
Valves are incorporated to permit the network to interface with a ground support cooling system 
dunng the RRS prelaunch period. Additional valves are included to permit the coolant loop to 
bypass the ECLSS heat exchanger and/or space radiator and thereby provide some degree of 
coolant temperature control. An auxiliary pump serves as a backup in the event of primary pump 
dysfunction or failure. A thermal control unit interfaces with the various valves providing fluid 
network flow control as dictated by the environmental control unit processor. 
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Figure 6.9-1. Payload Module ECLSS Heat Exchanger TCS Coolant Loop and 

Space Radiator Concept 



Figure 6.9-2. Payload Module ECLSS Heat Exchanger Thermal Control Subsystem 
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Having arrived at a general TCS concept, the design issue of identifying the appropriate 
coolant was addressed. For this concept, it was decided that a low system operating pressure of 
somewhere between 10 to 20 psia would provide a good balance of safety, cost, complexity, 
thermal efficiency, power requirements, and weight. At these pressures and anticipated ECLSS 
heat exchanger temperatures ranging between 270 to 300 K, a single-phase system using a liquid 
coolant such as ethylene glycol appeared appropriate. One inherent disadvantage, however, with 
using this coolant is that its viscosity displays a strong dependence on temperature. As a result, 
the viscosity becomes restrictively high as the temperature approaches its freezing point of 258 K. 
Therefore, in addition to a maximum allowable coolant temperature of 291 K imposed by the PM 
payload, a minimum allowable coolant temperature of 273 K was artificially imposed to prevent the 
viscosity of the glycol from becoming unacceptably large. 

6.9.4.1.2 Modeling Tool. To assess the performance of the proposed TCS concept, a 
modeling tool capable of handling in depth thermal response of multi-material structures, coupled 
with the thermal-fluid response of a coolant network, was required. Such a capability is achieved 
in the SAIC-developed Hypersonic- Vehicle Structural, Thermal, and Acoustic Management 
(HYSTAM) computer code. HYSTAM was originally developed to assess the performance of 
candidate cooling concepts for hypersonic vehicles. The code consists of three coupled modules 
that predict aeroheating and acoustics loads, structure thermal response, and cooling network 
thermal-fluid response. For the application at hand, the aeroheating and acoustics module was 
replaced by a module that predicted the solar insolation. Earth-reflected solar insolation, and Earth 
IR flux on an arbitrarily oriented surface in Earth orbit. Included within the routine were 

algorithms that tracked the orientation of each radiator panel as a function of vehicle rotations and 
orientation relative to the orbital plane. 

6.9.4.1 J Model. The philosophy adopted in this assessment was to model, as thoroughly as 
possible, the thermal-fluid response of the coolant, the transport of heat through the aeroshell 
thickness, and the consequent radiant heat balance of the aeroshell surface with the extraterrestrial 
envn-onment. The conceptual construction began with the subdivision of the aeroshell into 12 
equivalent rectangular panels, approximately 80 by 46 cm on a side, as shown in Figure 6 9-3 
Each panel represented 30° of vehicle circumference, and the combined areas matched that of the 
actual conic’s midsection minus the aft skirt and nosecap. Each panel consisted of a 2.286 cm lay- 
up of ESM (the aeroshell thermal protection material) over a 0.145 cm substrate of aluminum into 
which coolant passages were integrated as shown in Figure 6.9-4. This was an approximation of 
the actual substrate that will be aluminum honeycomb with aluminum coolant tubes bonded to the 
inner surface of the outboard facing sheet. However, the mass of the solid aluminum plate 
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Figure 6.9-3. Subdivision of Aeroshell Radiator Into 12 Equivalent Panels 



Figure 6.9-4. Detail of Aeroshell Radiator Panel Model 
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modeled replicated the anticipated mass of the actual substrate. Although the number and sire of 
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destgn requires eight coolant tubes, 0.899 cm in diameter, spaced 5 cm apan. 

The aeroshell ESM surface was coated with a low absorptivity white paint to enhance the 
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Following die HYSTAM modeling approach, a fluid network model of the cooling loop 
and its various components was constructed. A schematic of the network and a list of Z 
mponent descnpttons are presented in Figure 6.9-5 and Table 6.9-3, respectively. The network 

:Z " ° f 2 ' a PUmP ' * EC ^ S "«• -hanger, an inlet ma^fold whZ 

■f in * ’ tW ° “‘ S ° f S1X Pa " elS repr ' Sen,ln « 180 ° of vehicle circumference, a collection 

aXlllTT' fl0W ' r 3 ° f ““ — coefficients were 

Z to die heat exchanger and both manifolds. The pump characteristic curve used in the 

alysis, which was postulated, is presented in Figure 6.9-6. 



Figure 6.9-5. ECLSS Heat Exchanger TCS Coolant Loop Fluid Network Model 
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Table 6.9-3. ECLSS Hear Exchanger TCS Coolam Loop Raid Nelwork Compo 


nents 


Reservoir 

Volume 

Pressure 

Material 

= 0.001 m 3 
- 14.7 psia 
= Aluminum 

Pump 

See Figure 5-8 


Heat Exchanger 

120 W continuous 


Radiator Panel 
(see Figure 5-6) 

Surface: 

£h= 0.9 
a s = 0.2 
| Adiabatic 


1 Backface: 

Coolant Tube 
(see Figure 5-6) 

Number 

Diameter 

Material 

= 8 /panel 
= 0.889 cm 
= Aluminum 

Plumbing 
(assorted tubing) 

Total Length 

Diameter 

Material 

= 304.8 cm 
= 1.27 cm 
= Aluminum 

Coolant 

Ethylene Glycol 




Figure 6.9-6. ECLSS Heat Exchanger TCS Pump Characteristic Curve 
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' • ASSUmp, '° nS - In developing the TCS concept model, several assumptions and 

^ 10 adherC ‘° muld — modeling limitation in 

T The surface area of each aeroshell radiator panel was modeled exactly; however the 
additional surface area provided by the aft skin and nose sections was neglected. The spherical 
geometry of the nosecap and the complex radian, headng and exchange experienced by the skin s 
ac ace present s.tuanons HYSTAM could not model. Intuitively, one may surmise that the 
additional area will enhance the overall efficiency of the radiator. 

In the model, the backface of the aeroshell substructure was treated as a perfectly adiabatic 

boundary. A low density insulation will cover the substructure surface to minimize heat transfer 

with vehicle's internals, but some radiant exchange will soil take place. As noted above, HYSTAM 

is not configured to model the complex radiant exchange between the insulation and the satellite s 

internals. However, the temperature differences between the various internal surfaces and the 

substructure insulation will be small and, therefore, the consequent radian, transfer of heat should 
be negligible. 

With regard to the ECLSS heat exchanger, no attempt was made to model the time variant 
nature of the heat load or the transport of heat from the incoming PM air to the coolant. For this 

analysis, the heat exchanger control volume served as a continuous 120 W source term in the 
fluid’s thermal energy balance. 

Lastly, since the HYSTAM approach is multi-one-dimensional, no structural thermal 

communtcanon was permitted between panels. However, the heating loads about the aeroshell's 

circumference will be essentially unifomt because of the vehicle's constant axial rotation. This will 

result in a fairly uniform temperature distribution, consequently negating circumferential 
conduction. 

6.9.4X5 Results. Prior to exercising HYSTAM, a preliminary set of computations was 
conducted to ascertain which of the 30 possible DRM/vehicIe orientation/season combinations (f.ve 
DRMs, three seasons, two vehicle orientations) subjected the aeroshell's surface to the most sties- 
stag thermal environments. The goal was to economize the required number of HYSTAM runs by 
concentrating on the scenarios that produced the highest and lowest aeroshell hearing rates and, 
t erefote, the hottest and coldest aeroshell surface temperatures. The orbital geometry and vehicle 
orientation and rotation modes considered in the analysis are portrayed in Figure 6.9-7. The same 
orbital heat loads model used for the aft cover and aeroshell heat balance computations described 
previously was used. For this investigation, however, surface .eradiation was no. computed. 
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Figure 6.9-7. Orbital Geometry and Vehicle Orientation and Rotation 
Considered in Total Absorbed Flux Computations 


Modes 


For the analysis, total absorbed flux computations were performed for DRMs 1 through 5, 
considering both normal rotation (7 rpm, see Figure 6-9-7) and microgravity vehicle orientations 
with a constant axial rotation rate of 0.14 rpm. Orbit inclination angle relative to the ecliptic was 
adjusted to account for Vemal/Autumnal Equinox, Summer Solstice, and Winter Solstice seasonal 
variations. The analysis location corresponded to the aeroshell’s 15° circumferential station which 
translated to the center of panel 1 in the coolant loop fluid network model. 


Based on the results of this preliminary investigation for the 30 possible combinations, the 
average absorbed flux at the aerosheU’s surface during one orbital period ranged between 76 
and 103 W/m . These extremes corresponded to the DRM-5, Summer Solstice and the DRM-3 
Vemal/Autumnal Equinox orbits with the vehicle in a 7 rpm normal rotation mode. Table 6.9-4 
depicts the parameters that define these two orbits. The total absorbed flux witnessed by aeroshell 
panel 1, as a function of time for these two orbits, is presented in Figure 6.9-8. 
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Table 6.9-4. DRM-3, Vemal/Autumnal Equinox and DRM-5, 
Summer Solstice Orbit Definitions 


Designation 

DRM-3 

Vernal/Autumnal 

Equinox 

DRM-5 

Summer 

Solstice 

Orbit Inclination 
(relative to ecliptic) 

98° 

5° 

Orbital Period 

6176 sec 

5492 sec 

Occultadon Period 

0 sec 

2177 sec 

Altitude 

897 km 

350 km 

Normal Rotation 

7 rpm 

7 rpm 

Axial Rotation 

0.14 rpm 

0.14 rpm 


Having defined a TCS network model and identified the most stressing orbits, the 
thermal/hydraulic response of the fluid network and space radiator was assessed using HYSTAM. 
Figure 6.9-9 shows the predicted hydraulic response of the subsystem at steady-state conditions 
for both orbits. The computed pump power, assuming an efficiency of 65%, is a continuous 7.4 
W. The pump produces approximately 5 psia of head, a coolant mass flow rate of 0. 153 kg/sec, 
and a coolant velocity of 0. 1 37 m/sec within the radiator coolant tubes. 

The predicted thermal response of the coolant for both orbits is presented in Figure 6.9-10. 
The temperatures correspond to that of the fluid as it enters the ECLSS heat exchanger. The initial 
system temperature for the DRM-3 orbit was set at 300 K and was designated the hot orbit/hot start 
condition. The initial system temperature for the DRM-5 orbit was set at 280 K and was 
designated the cold orbit/cold start condition. The intent was simply to derive some insight into 
how initial temperature influenced the time required for the subsystem to reach a steady-state 
operating condition. 

The hot orbit/hot start condition requires the coolant loop to bypass the heat exchanger for 
approximately 3600 seconds. The bypass permits the residual heat within the subsystem to 
dissipate allowing the temperature of the coolant to drop below the 291 K maximum allowable for 
ECLSS heat exchanger. For the analysis, the bypass was simulated by switching the 120 W 
source term in the ECLSS heat exchanger control volume on at 3600 seconds into the calculation. 
This is evidenced in Figure 6.9-10 by the burp in the coolant temperature response curve. For the 
DRM-3 orbit, the coolant temperature stabilizes at 284 K. 
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Figure 6.9-10. Coolant Thermal Response 
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Table 6.9-5. PM ECLSS TCS Weigh, Budget 


Component 

Mass 
lbs (kg) 

Coolant 

10.8 (4.9) 

Tubing 

15.6 (7.1) 

Pumps 

5.5 (2.5) 

Reservoir 

' 3.1 (1.4) 

Valves and fittings 

2.2 (1.0) 

Structure 

U (0.5) 

total 

38.4 (17.4) 
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6.9.4.1.6 Conclusions. Based on results reported in the Ames Reusable Reentry Satellite 
Design Study and the current trade study, it was concluded that an active TCS, consisting of a fluid 
network coupled with a space radiator, was a viable thermal control concept for the SAIC RRS 
Payload Module's ECLSS heat exchanger. A preliminary thermal response calculation indicated 
that the RRS aeroshell would serve as an acceptable location for the TCS space radiator. Based on 

the subsystem's projected operating pressure and temperature, the liquid coolant ethylene glycol 
was chosen as the TCS working fluid. 

A thermal-fluid response assessment of the proposed TCS was performed using the 
HYSTAM computer code. The analysis considered the two RRS orbit/vehicle orientation/seasonal 
combinations that subjected the aeroshell to the most stressing thermal environments. The aeroshell 
surface was coated with a low absorptivity white paint to enhance its dissipative efficiency. The 
coating was assumed to have a solar absorptance of 0.2 and a hemispherical emissivity of 0.9. 
The results indicated that eight 0.889 cm diameter coolant tubes integrated into the aeroshell's 
substructure effectively dissipated the heat exchanger's 120 W heat load while maintaining the 
coolant within the mandated temperature range of 273 to 291 K. 

The pump power requirement for the TCS was estimated to be a continuous 7.4 W. The 
projected weight of the complete subsystem is 38.4 lbs (17.4 kg). 

6.9.4.2 Extended Module Propellant Thermal Response 

6.9.4.2.1 Introduction. The RRS Extended Module contains six spherical tanks fabricated 
from titanium in which hydrazine propellant is stored. Current system requirements dictate that the 
temperature of the propellant must be maintained between 275 and 330 K to ensure its safe 
containment. The tanks are almost completely enclosed by surrounding surfaces and thereby 
shielded from direct extraterrestrial exposure; however, because of the wide array of orbit types 
and vehicle orientations the RRS might encounter, thermal exchange with these externally exposed 
structures will still take place. Therefore, it is probable that under certain conditions the 
temperature of the tanks and their accompanying propellant will violate the above requirement if 
corrective measures, such as insulations, spectrally selective coatings, or heaters, are not imposed. 
This section describes the thermal assessment of the Extended Module that was performed to 
ascertain which corrective measures, if any, were necessary. 
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6.9.4.2.2 Modeling Tool. The Extended Module presents a relatively complex three 
dimension geometry that experiences radiant exchange with its extraterrestrial environment as well 
as radiant and conductive exchange between its component parts. The SAIC-developed Thermal 
Analyzer for Systems Components (TASC) computer code is well suited for this application. 
TASC is a lumped-capacitance, electrical resistor-capacitor network analog-based code for 
analyzing time-dependent thermal response of arbitrarily configured, multi-material, one, two, and 
three dimensional systems. A routine for computing direct solar insolation, Earth-reflected solar 
insolation, and Earth IR radiation on an arbitrarily oriented surface was integrated into the code 
which computed the magnitudes of these radiant components exactly as a function the Extended 
Module's time variant orbital position and orientation. This routine was an adaptation of the model 
used in the ECLSS TCS heat balance and HYSTAM computations described in Section 6.9.4. 

6.9.4.2.3 Model. A pictorial representation of the Extended Module model developed for this 
assessment is presented in Figure 6.9-12. The model consisted of a truncated cone composed of a 
solar array over a substrate of aluminum honeycomb, two circular aluminum honeycomb disks 
serving as forward and aft covers, and six tanks, half full of hydrazine (nominal condition), 
suspended within the resulting enclosure. The entire model experienced rotations as prescribed by 
the particular orbital mission under consideration. The solar array and the external surfaces of the 
covers were exposed to direct solar insolation. Earth-reflected solar insolation, and Earth IR 
radiation and experienced radiant exchange with the Earth and deep space. 

Before developing a TASC electrical network analog for the Extended Module model, a set 
of preliminary calculations was undertaken to assess the thermal response of the module's solar 
array. The motivation was to obtain an estimate of temperature gradients about the module's 
circumference and guide the model nodalization process. 

As described above, solar panels cover the entire exterior surface of the module's truncated 
cone perimeter. A simple TASC model of the array was developed by dividing the truncated cone 
into six equivalent circumferential sections. Each section consisted of a lay-up of quartz over a 
substrate of aluminum honeycomb. Each panel was permitted to communicate with its neighbors 
via conduction, however, no radiant exchange across the cone’s interior was considered. The 
thermal mass and response of the remaining Extended Module's structure was ignored. 
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Figure 6.9-12. RRS Extended Module Model 

The TASC code was exercised for the DRM-3 orbit at Vemal/Autumnal Equinox with the 
vehicle in the gravity gradient orientation (no vehicle rotation, vehicle’s axis is perpendicular to the 
Earth’s surface, and vehicle nose facing outward). From analyses discussed in Section 6.9-4, this 
scenario was determined to impose the highest heat loads on vehicle conic surfaces. Figure 6.9-13 
presents a pictorial representation of the orbital geometry and vehicle orientation considered. 

The results are presented in Figure 6.9-14 which plots the temperature response at the 
centroid of each panel versus time. The temperatures experienced by the sun facing panels (-120° 
- 180° - -240°) cause a substantial degradation in the array's overall efficiency and a consequent 

loss in power production that is unacceptable. 
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Figure 6.9-13. DRM-3 Orbital Geometry and RRS Vehicle Orientation Considered 
in Extended Module Solar Array Thermal Response Analysis 


DRM-3, Vernal/Autumnal Eauinox, Gravity Gradient 
No Vehicle Axial Rotation 



Figure 6.9- 14. Extended Module Solar Array Thermal Response for DRM-3 Orbit 
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An obvious solution for eliminating the large nonuniformity in temperature about the 
module's circumference is to impose an axial rotation on the entire vehicle. However, the loads 
induced by such a rotation must not produce an acceleration greater than 10' 5 g as set forth in the 
RRS System Design Study Statement of Work. A simple calculation sets the maximum allowable 
axial rotation rate at 0.14 rpm. This rotation produces an acceleration of 10' 5 g at the PM’s 
44.5 cm outer radius. This results in an acceptable 0.8 x O' 5 g at the maximum rodent cage radius 
of 35.6 cm. 

Repeating the previously described TASC analysis with a vehicle axial rotation rate of 
0.14 rpm results in the circumferential temperature distribution presented in Figure 6.9-15. The 
rotation is sufficient to effectively smooth the nonuniformity and results in an array temperature of 
300 K +/- 10 K. 

The above results were used to develop the electrical network analog for the Extended 
Module model shown in Figure 6.9-16. Because of geometric and thermal symmetry, the solar 
array, array substructure, and forward and aft covers were modeled as single nodes. In addition, 
the six propellant tanks and their resident propellant were also treated as single nodes. The surface 
areas, masses, and conductive contact areas between each of these structures, however, were all 
computed based on the Extended Module's actual geometry. The radiation view factors between 
the array substructure, forward cover, aft cover, and propellant tanks were calculated assuming no 
intervening obstructions. 

Table 6.9-6 describes the material, mass, and radiant properties for each of the six network 
nodes. The external surfaces of the forward and aft covers were coated with a high absorptivity 
black paint. The coating was assumed to have a solar absorptance and hemispherical emissivity of 
0.9. For the DRM-3 polar orbit, the mass of the node representing the propellant was set to zero. 
Since the heating environments induced by this orbit are relatively uniform, the temperatures of the 
various surfaces which constitute the module's exterior will not fluctuate broadly over each orbit. 
Since the temperatures of these surfaces in turn drive the thermal response of the propellant tanks, 
the tanks themselves will experience even smaller fluctuations and as a consequence equilibrate to a 
steady-state condition. As a result, the additional mass provided by the propellant only serves to 
lengthen the system's equilibrium time constant. By eliminating the mass of the propellant when 
considering the DRM-3 orbit, the system reaches its equilibrium condition more rapidly thereby 
reducing the required computation time interval. 
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Figure 6.9-16. Extended Module Model Electrical Network Analog 


6.9-23 




Table 6.9-6. Extended Module Model Electrical Network Analog Nodal Descriptions 


n 

Material Modeled 

Nodal Mass 
(kg) 

Radiant 

Surface Properties * 

Solar Array 

Quartz 

3.15 

a, = 0.86 £„ = 0.80 

Substructure 

Aluminum Honeycomb 

20.10 


yn 

Aluminum Honeycomb 

8.23 

■ ■ 

Aft Cover 

Aluminum Honeycomb 


a, - 0.90 ^ - 0.90 
a m 0.80 e »0.80 

Propellent Tank 





Hydrazine 

DRM-3 0.0 
DRM-5 134.20 



•• External surfaces coaled with Hack pair* 
7 External surfaces coated, but uninsulated 


l surfaces 
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s sted economizing dte analysis without sacrificing tite integrity of the predictions. Several of 
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Additional assumptions were adopted in order to impart some degree of conservatism into 
the overall analysis. The tanks were assumed to be coated with a surface preparation, but were left 
uninsulated. The analysis neglected the 67 W of heat rejected from the various electronics, 
batteries, and hardware located within the module (a conservative estimate when considering 
minimum predicted temperatures). Also, as noted previously, the view factors between the tanks 
and the inner surfaces of the solar array and covers were computed assuming that there were no 
intervening obstructions. 

6.9.4.2.5 Results. As was the case in the ECLSS heat exchanger TCS thermal response 
assessment described in Section 6.9.4, prior to executing the TASC code, a set of preliminary 
calculations was performed to determine which DRM/vehicle orientation/season combinations 
subjected the module s surfaces to the most stressing thermal environments. As before, the goal 
was minimize the number of code computations necessary to adequately assess the module's 
thermal performance. Figure 6.9-7 shows the orbital geometry and RRS vehicle orientation and 
rotation modes considered in the analysis. The orbital heat loads routine described in Section 

6.9. 1.5 was used to perform the computations in conjunction with the surface radiative properties 
given in Table 6.9-6. 

The results from the above investigation indicated that the DRM-3, Vemal/Autumnal 
Equinox and DRM-5, Summer Solstice orbits in combination with a vehicle normal rotation rate of 
7 rpm produced the lowest and highest heat loads on the module. The forward cover was the 
exception. This surface received the lowest and highest absorbed fluxes for the above orbits, but 
in combination with the gravity gradient vehicle orientation. Examples of the computed total 
absorbed fluxes at the surface of the Extended Module aft cover are presented in Figures 6.9-17 
and 6.9- 1 8 for the above scenarios. 


Having identified the most thermally stressing orbits, the TASC code was exercised on the 
previously described Extended Module model. Figure 6.9-19 shows the predicted temperature 
responses of the solar array substructure, the forward and aft covers, and the propellant tank for 
DRM-3. Since the solar array was treated as a single node and the thermal heat balance was 
performed at only a single circumferential station on the conic, the 0.14 axial rotation produces an 
oscillatory temperature response for this surface. For both the normal rotation and gravity gradient 
vehicle orientations, the propellant tank equilibrates to approximately 280 K. 
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Figure 6.9-17. Total Absorbed Flux (Solar + Albedo + Earth IR) at Extended Module Aft 
Cover Surface During One Orbital Period for DRM-3, Vemal/Autumnal Equinox, Normal 
Rotation and Gravity Gradient Vehicle Orientations 
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Figure 6.9-18 . Total Absorbed Flux (Solar + Albedo + Earth IR) at Extended Module Aft 
Cover Surface During One Orbital Period for DRM-5, Summer Solstice, Normal Rotation 

and Gravity Gradient Vehicle Orientations 
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Figure 6.9- 19. Predicted Temperature Response of Extended Module for DRM-3, 
Vemal/Autumnal Equinox, Normal Rotation and Gravity Gradient Vehicle Orientations 
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Figure 6.9-20 shows the predicted temperature responses of the solar array substructure, 
forward and aft covers, the propellant tank, and propellant for the DRM-5 orbit. For this orbit, the 
nodal temperature fluctuations are more pronounced because of the 2177 second occultation 
period. Although the temperature variations of the module's external surfaces fall well below the 
minimum propellant allowable of 275 K, the radiant coupling between these surfaces and the tank 
is sufficiently damped to prevent the tank temperature from dropping below 280 K. The bulk 
temperature of the propellant remains relatively steady, equilibrating to about 295 K for both the 
normal rotation and gravity gradient vehicle orientations. 

Subsequent to the analysis performed for the microgravity mission with the RRV in the 
plane of the orbit as shown in Figure 6.9-13, it was determined that placing the vehicle in an 
orientation perpendicular to the plane of the ecliptic, as shown in Figure 6.9-21, would be 
preferred for all orbital inclinations. This orientation optimizes power available from the solar 
panels and provides good antenna coverage for the GPS and TDRSS links. The results of the 
analysis, as shown in Figure 6.9-20, for the DRM-5 mission provide the temperature extremes on 
the Extended Module containing the propulsion system. The temperature of the Extended Module 
in the new orientation will not reach the cold extremes as indicated in Figure 6.9-20 because the 
Extended Module will see more Earth during the eclipse mode. This result is more than acceptable 
since the propellant tanks will benefit from the warmer temperature. The temperatures of the 
Extended Module, as indicated for the DRM-3 mission and shown in Figure 6.9-19, will be 
somewhat warmer with the new orientation. In the new orientation, the RRS will be more exposed 
to the Earth and less exposed to deep space. The time constant of the heat shield material is 
approximately 1/2 that of the orbital period which may marginally increase the temperature 
extremes. The temperatures should be quite acceptable but a more detailed analysis should be 
performed. 

6.9.4.2.6 Conclusions. An assessment of the on-orbit thermal response of the SAIC RRS 
Extended Module has shown that the propellant housed within its interior should remain between 
280 to 300 K for all anticipated RRS missions. The analysis indicates that shielding the tanks from 
exposure to the external environment and coating the exterior surfaces of the forward and aft 
covers with a high absorptivity black paint are adequate measures for maintaining the propellant 
above its minimum allowable of 275 K. At present, it appears that no active thermal control 
measures will be necessary. 
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Figure 6.9-20 Predicted Temperature Response of Extended Module for DRM-5, Summer 
Solstice, Normal Rotation and Gravity Gradient Vehicle Orientations 
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Figure 6.9-2 1 . Microgravity Preferred Orientation 


6.9.4.3 Payload Module Water Supply Thermal Response 


Three cylindrical tanks reside within the RRS Main Module, each containing approximately 
20 kilograms of water. The tanks are situated concentrically about the PM, as shown in Figure 6.9- 
22. The total quantity of water stored is sufficient to sustain a population of 18 rodents for 60 
days. Since the water is stored in liquid form, it must remain above 273 K throughout all 
anticipated RRS missions. The following addresses the design issue of whether or not active 
heaters are required to maintain the water above this temperature. 



Aft Cover 


Figure 6.9-22. Water Storage Tank Locations Within Forward Module 
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Table 6.9-7. Thermal Subsystem Mass and Power 


Unit Total 

Mm* POWER Mass 

Componsnt (lbs) (Wstts) t libs) 

COOLANT 

nn 


■l 

10.8 

TUBING 

15.6 


m 

15.6 

PUMPS 

2.8 

7 WATTS EACH 

m 

5.5 

RESERVOIR 

3.1 


m 

3.1 


0.3 

5Atf20MSEC 

m 

1.3 




6 

1.5 

1 FILTERS 

■¥1 


1 

0.3 


ES 


■0 

0.5 

QUICK DISCONNECTS 

mi 


Z li 

1.0 

FILL/DRAIN 



m 

0.5 

SENSORS 

0.1 

.1 WATT 

m 

0.4 

INSULATION 

10.0 


m 

10.0 


mi 

MASS VALUE 

UNCERTAINTY 

UNCERTAINTY 


mi 

% 

(lbs) 

H9 

10.8 

20 

I 22 


15.6 

20 



5.5 

20 

L. i.i 1 


3.1 

10 



1.3 

2 



1.5 

20 



0.3 

2 



0.5 

10 



1.0 

5 



0.5 

2 



0.4 

2 

■hh 


10.0 

50 

■HiBSHH 


TOTAL 

12.1 


Table 6.9-8. Telemetry Measurements 

• AFT Solar Panel Temperature 

• Battery Base Plate Temperature 

• Payload Temperature 

• Propellant Temperature 

• Coolant Temperature 

• Discharge Controller Temperature 

• GNC Computer Temperature 

• Thermal Radiator Temperature 

• Temperature of Heat of Fusion Heat Sink 
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6.10 Recovery 


6.10.1 Operations 

The terminal recovery system performs final deceleration of the vehicle for a CONUS 
(White Sands) or water recovery. The system is operated by the GNC system which uses GPS 
position and velocity data to determine release points for the chutes. The first chute is deployed by 
an explosive mortar that ensures that the chute clears the major slipstream of the RRV before 
beginning deployment. The second and main chutes are deployed by the chute before. 


6.10.2 Requirements 

The terminal recovery system is responsible for decelerating the RRV from approximately 
Mach 2.5 at 60,000 feet to 20 feet per second at touchdown. The RRV mass is estimated at 3,700 
lbs, and the touchdown location is White Sands Missile Range, which is at an altitude of 
approximately 5,500 feet. The system initial deployment requirement is driven by stability 
requirements of the RRV design. Below Mach 5, the RRV center of pressure (CP) moves forward 
as the velocity decreases. The CP reaches minimum at about Mach 1, at which time the baseline 
RRV would have about 9.8% stability margin. The supersonic drogue deployment alleviates this 
by stabilizing the vehicle and slowing it sufficiently for pilot chute and main chute deployment. 

6.10.3 Trade Study Summary 

The terminal recovery trade study considered four designs: a) air snatch with conventional 
parachute, b) conventional chute with terminal retro rockets, c) conventional parachute and impact 
attenuation system, d) gliding parafoil with impact attenuation system. 

The advantages and disadvantages of these systems, as reviewed for the RRV, are 
summarized in Table 6.10-1. The results of the trade study rejected the air snatch and terminal 
retrofire on the basis of cost for the air snatch, and design complexity for the terminal retrofire 
system. The trade summary is given in Table 6-10-2. 


6 . 10-1 



Table 6.10-1. Preliminary Screening of Landing Systems 



Passive 

Air 

Terminal 

Gliding 

Screening Criteria 

Attenuation 

Recovery 

Retrofire 

Parachute 

Design Philosophy 



Ml 


- Minimum Safety Risks 

Good 

Good 

■SB 

Good 

- Low Life-Cycle Costs 

Excellent 

Poor 

mmm 

Excellent 

- Flight Proven Technology 

Excellent 

Excellent 

mBBm 

Fair 

- Existing Hardware Design 

Excellent 

Excellent 

Fair 

Fair 

- Redundancy Necessary for 

Excellent 

Poor 

Fair 

Good 

Safety and Mission Success 





Landing Point Dispersions 





- Dispersion Range 

Good 

Good 

Good 

Excellent 

G Loads 





- Atmospheric Braking 

Fair 

Fair 

Fair 

Fair 

- Ground Impact <1 0G 

Good 

Excellent 

Good 

Excellent 

Post Landing Access 





- Access to PM in 2 Hours 

Good 

Excellent 

Good 

Excellent 

- GSE Within TBD Minutes 

Good 

Fair 

Good 

Good 
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Table 6.10-2. Landing System Downselect 


• DROP AIR RECOVERY LANDING SYSTEM 

- High Operational Cost 

— Requires Continued Availability of Highly Trained 
Helicopter Flight Crews for Project Life 

- Requires Continued Availability of Specially 
Configured Helicopters for Project Life 

- Mission Success Reliability 

- Demonstrates Mission Success in Recovery is Approximately 96% 

- Mission is Affected by Weather and Night 


• DROP TERMINAL RETROFIRE LANDING SYSTEM 

- RRS Project Safety Risk 

- Design Approach Requires the Addition of Multiple 
Landing Rockets and Initiators 

- Hardware Design and Development 

- Landing System Design Requires Some Development of 
Hardware and Sensors to Meet RRS Mission Reliability Goals 


• PERFORM FINAL COMPARISON OF CONVENTIONAL PARACHUTE WITH 
PASSIVE ATTENUATION AND GLIDING PARACHUTE LANDING SYSTEM 
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This left the conventional and gliding parafoil designs. Detailed design data was obtained 
from three manufacturers as shown in Table 6.10-3. 

Table 6. 10-3. Source Data from Parachute Industry 


Manufacturer 

Representative 

Gliding Parachute 

Conventional 

Parachute 

Para-Flight, Inc. 

Troy Laney 

X 




Pioneer Aerospace Corp. 

William Everett 


X 

X 


Irving Parachute Co. 

Phil Delurglo 




X 


Estimated System Weight 

120 lbs.* 

90 lbs.** 

130 lbs. 

160.6 lbs. 

Estimated System Volume 

2.75 cu. ft. 

2.6 cu. ft. 

3.7 cu. ft. 

3.14 cu. ft. 

Estimated DDT&E Costs 

$1.2-1.4M 

$1.16M 

$0.78M 

$1.28M 

Estimated DDT&E Time 

— 

2 Years 

1 .5 Years 


Estimated Hardware Cost 

$100,000 

$38,000 

$17,500 

$40,000 

Estimated Refurbishment Cost 

$15,000 

$8,500 

$5,800 


Anticipated Test Program 

1 Year 

1 Year 

0.5 Year 


Number of Drops to Qualify System 

25-30 

15 

10 

10 


Weight and volume do not include power source. 

Cost, weight, and volume to not indude guidance, navigation, and control 
equipment, onboard sensing, steering actuators, or power source. 
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The gliding parafoil offered several key advantages over a conventional parachute. These 
included: 

a. Landing Recovery Dispersion Minimization - The gliding parachute has a glide ratio of 
>2.5:1. This, coupled with use of GPS to determine absolute position and relative 
position to a desired landing point, allows the gliding parachute to decrease landing 

dispersions caused by upper atmospheric density variations and wind drift at lower 
altitudes. 
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b. Soft Landing Hare - The gliding parachute has the capability to eliminate most of the 
vehicle’s forward and vertical motion just before touchdown. This landing are 
operation can be automated using a GPS-based system, or can be manually controlled 

by ground personnel. 

The major disadvantage of the gliding parachute is its lack of design maturity. For this 
reason, the gliding parachute is considered a design option for the RRV, with a conventional 
parachute as the baseline design. 


6.10.4 Baseline Design 

The baselined terminal recovery system design consists of two ribbon parachutes and a 
main final descent parachute. Figure 6.10-1 shows the sequence of events during the recovery 

cycle. 


60,000 FT 


30,000 FT 


VELOCITY - 2440 FEET PER SECOND (FPS) 
MORTAR RELEASES SUPERSONIC DROGUE 
COEFFICIENT OF DRAG (Cd) - 0.5 


VELOCITY - 800 FPS 

PYROS RELEASE PILOT DROGUE 

Cd - 0.55 


8,000 FT 



VELOCITY - 350 FPS 
MAIN CHUTE DEPLOYED 
BY PILOT CHUTE 
Cd - 0.61 

VELOCITY - 20 FPS 
TOUCHDOWN 


TOR42i/26 


Figure 6.10-1. Recovery Sequency 
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6.10.4.1 Supersonic Drogue. The supersonic drogue deploys at approximately 60,000 eet 
for the nominal DRM- 1 mission descent proftle. This corresponds to a veloctty of approxtma e y 
2,440 feet per second. This parachute is 12 feet in diameter, is a ribbon des.gn, and we.g 
lbs The design has a coefficient of drag <C„) of 0.5. This chute decelerates the veh.cle to 800 fps 
a, approximately 30,000 feet, at which point pyros release the main parachute drogue, whtch ts 

pulled out by the supersonic drogue. 

6 10 4 2 Pilot Drogue. The pilot drogue is a ribbon type design with a 15 foot diameter and a 
C d of 0.55. This parachute decelerates the vehicle to 350 fps. where it serves as the p.lot parachute 
used to pull out the main chute. This unit weighs 15 lbs. 

6 10 4 3 Main Parachute. The main parachute is a ring sail design with a Cd 
parachute has a 127 foot diameter and weighs 150 lbs. The design implies single , stage r eefing to 
limit opening shock less than 6 g's. This system decelerates the vehtcle from 350 fps fps 

touchdown. 

6.10.4.4 Ancillary Hardware. Ancillary hardware includes the mortar for initial supersonic 
parachute deployment, pyrotechnic bolts for release of covers and sequential parachutes, and e 
cover itself. Total weight for these items is 18 lbs. A weight breakdown of the system ts pmvtded 

in Table 6.10-4. 


Table 6.10-4. Terminal Reentry Mass and Power 


Unit Total 

Mas* * Mas* 

(Ihs) (lbs_l 


POWER 

(Watts) 


TOTAfc 


1 »» 



.MASS VALUE UNCERTAINTY UNCERTAINTY 
e tih.1 % ( lb *l — 


m>») 

5.0 

1 0 

0.5 

150.0 

5 

7.5 

15.0 

10 

1.5 

10.0 

20 

2.0 

7.0 

10 

r 0.7 

6.0 

" 5 

TrtT A 1 

0.3 

12.5 
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6.10.5 Command and Control 


Command signals for parachute deployment are provided by the GNC subsystem. The 
GNC calculates altitude and velocity, and releases the parachutes based on a stored set of 
parameters. Release can also be commanded from the ground, if required. The opttonal gliding 
parachute requires additional commanding to two control motors. The motors control flaps on the 
parachute that control the direction of the glide. In addition, operation of both flaps “stalls" the 
chute for final touchdown. The flight direction would be determined by a homing beacon equipped 
with a GPS receiver, and the GPS on the vehicle. The computer could then fly the RRV as close 
as possible to the beacon. The final landing flare would nominally be automatic, based on the 
differential GPS between the beacon and the RRV. However, manual control override is provided 

via the TT&C system. 
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7.0 COST SUMMARY 


The cost analyses for the RRS are contained in the System Cost Estimates Document. 
These analyses were performed based upon a set of ground roles and assumptions (Table 7-1) 
made at the beginning of the program and used in the preliminary report. This section contains a 

brief summary of the results. 

Table 7- 1 . Key Ground Rules and Assumptions 


; S AIC’S TECHNICAL BASELINE FOR RRS AS PRESENTED AT 
FINAL REVIEW 

. DELTA 6920 LAUNCH VEHICLE COSTED 
. COSTED IN CONSTANT FY90 DOLLARS (FY90S) 

. A 100% LEARNING CURVE 
. THE O&S LIFE CYCLE COSTED IS TEN YEARS 
• ALL ELV LAUNCHES ARE COSTED AS DEDICATED RRS 
LAUNCHES 

. SEALED VEHICLE COSTS ARE RELATIVE 


7.1 Scalability 

One of the key issues addressed in the cost analyses was the possibility of achieving cost 
savings via the use of the newer, smaller commercial boosters. To assess the smaller vehicle 
approach, the basic design was scaled down to several smaller sizes (Figure 7-1), the smallest 
being roughly the size required for a Taurus launch. This analysis resulted in the following 

observations: 

a. The smaller booster is cost inefficient on a per unit payload basis. For example, three 
Taurus launches (approximately $81M) are required to achieve the same number of 
rodent-days that a single RRS Delta launch (approximately $45M) can provide. 
Furthermore, since the Delta has a dual-launch capability for the orbits accessible to the 
Taurus, the Taurus is effectively over three times more expensive than the Delta. 

b . The smaller vehicle required for a Taurus class launch will not easily accommodate off- 
the-shelf equipment, resulting in less redundancy (a public safety issue) and/or the need 
to develop more compact components at higher development cost and cost/schedule 

risk. 
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7.2 Approach 


The GE (RCA) Price H Cos. Model (Table 7-2) was used for estimating the cos. of the 
development and manufacture of the RRS. The inputs were provided a. the urn. level and as. 
cos. runs made for the individual unit, single-flight vehicle, and two-fl.ght veh.de cases. y 
“cent spares were then added to the 2-vehic.e ease to approximate the 2-veh.cle opera mg c e, 
and a 4-vehicle run was made to investigate the cost increment for a few addmonal ve ic es 
7-3 describes the quantities used in the two-vehicle case. The development and manufac.un g 
breakout is presented for each case in Table 7-4. 

Table 7-2. Price H Cost Estimating Approach 

PERFORMED BY CO$T, INC THROUGH FAIRCHILD SPACE 
WEIGHT/VOLUME/COMPLEXITY /SCHEDULE BASED INPUT AT 
SUBSYSTEM/BOX LEVEL 

- Manufacturing Complexity Calibrated By Co$t, Inc. 

-gBSSSSS-- 

RUN SEQUENCE 

- Single Unit Development Cost 

- Program With: 1 Flight Vehicle 

6 2 Flight Vehicles 

2 Flight Vehicles with Spares 
4 Flight Vehicles with Spares 
With and Without Schedule Constraints 


7.3 Summary 

In summary (Table 7-5). the proven Delta/Atlas boosters are cost comperitive wUh the 
newer, smaller commercial boosters if viewed on a total program reqmrements basts. A tot. 1 cost 
of about S200M for the development and production of two fl.ght vehmles .s sp .. roug y 
between development and production, and the $50M per vehie.e Post compares ■ 
recent GPS 11R (a comparable sized vehicle) experience. When v.ewed on a L.fe Cycle bas.s, 
I" f The four-vehicle program is less than a 5% increase and would appear to be a good 
investment against unforeseen booster failure, especially if dual launches am used to decrease 

overall program cost 
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Table 7-3. RRS Subsystem Quantities (Definitions) 


Quantity: 


nig &^"rSnM“l S (S V id 1 Deployed Module 
(DM) 

En SSw« + Thermal/Mass Mode* 
(TMM) 

VeH Con|te a Wo&esied MM Model Except for Selected 
Subsystems. Full Interface 
Support to PM 


2 Hl8 Consfsting of^slipport Module (SM) and 1 Experiment 



Module (EM) 

1 

Pay Com^e U WorSn^ested SM Maie^ce^for ^lwt^ 

Subsystems. Full Interface, Mass and Thermal Emulation 

1 

Gr0U c“g on^d r^Hight PM (Ground Test Module 
(GTM)) 


Ref ConceM"s tf to P S Sufficient Spares to Pull and Replace Any 

So 

Dual Spared 

3 

Right Payload Adapters 

6 

RRV Interface Only. 2 for Factory Test. 
2 forField (ETV/Launch, Recovery) Operations, 2 for VEs 

Quality: F- Flight C • Oojg-WWdn, and Tested Model 

P - Partial Prototype B - Brassboara 

E - Engineering Model 

, - Not Applicable 

r ~ zuznzm 


7-4 



Table 7-4. Pre-Calibration Price H Results ($M) 



Table 7-5. LCC Summary 

PROVEN BOOSTERS (DELTA/ATLAS) PROVIDE COMPETITIVE EXPERIMENT 

VALUE ^ Boosters Cost More Per Unit Experiment 

Larger Vehicle Higher Value Per Launch nAricK _ 

PRE-CALIBRATION PRICE H COST ESTIMATE, VEHICLE AND RODEN 

M ™velopmen« *' 05M 

Vehicle 1 w 

if. 50% Spares 26 

Vehicle 2 ~ 

V 4 V C ehicl=Terage 34 <$»M Based Upon GPS HR I 

TOTAL, BASED ON PRE-CAL PRICE-H FOR 2-FLIGHT VEHICLES WTTH 50% 

™mARY 7 LCC ESTIMATE FOR 30 DELTA FLIGHTS, .0 YEARS 
Includes SAIC O&S Estimate of $1682M 

Per Launch 

Total ($M) Single Dual 

2 Flight, 50% Spares 2001 67 43 

4 Flight, 50% Spares 2075 
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8.0 CONCLUSIONS AND RECOMMENDATIONS 

The primary intent of the Phase B s,udyfo ” hC ^sy^emlnd booster tradeoff 

t!le NASA Phase A concept into a ^ design lo he deve.oped 

r d “": 0 s™ed a uniquJ design, significantly different in concept from 

s:r=£S-— ; r:r“:=-rr?. 

development. These addinonal e orts operations, the GNC/propulsion 

redundancy needed to ensure pu ic sa *Hentified in the risk analysis, and an 

approach required to fulfill the de-orbit requ.rements tdenttfied hens 

independently verified evaluation of the unique deployable tn-mast appro . 

8.1 Key Features 

The SAIC design (Figure 8-1) provides a flexible, science friendly approach that can be 

T . The centralized payload volume can accommodate up to six 

rea di.y launched on extstmg ^vitational environment. 

STS Mid-Deck _ be exposed to fre e-space radiation 

" — g the modification of the = 

^“rin^nS 

The snlit vehicle design that makes the radiation exposure possible also allows the use of 

enough to support the EBM simultaneous nucro-G/l-g experiment. 

The split vehicle concept also allows modularizing .0 provide the paralW manufac.uring 

and cost risk. 
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The "Fail Operational" GNC/propulsion configuration (Table 8-1) P rov ' d ' s an 
■ ' based self correcting de-orbit capability to ensure public safety both during 

autonomous, dectston-b^ g rf a „ uncontrolled .. dead vehic , e " 

Zr~i:«si OT configuration also provides the capabiltty to vary the orbit 
during a mission. 


Table 8- 1 . Propulsion System Trade 
Cons 



The Global Positioning System is used for orbit determination, "any orientation" attitude 

determination, precision de-orbit control, and precision recovery 

providing landing coordinates to within a fraction of a meter to the recovery forces. 

The RRS can be mounted on a Delta launch vehicle, in either a single or dual 
using a modified version of the ex, sting second stage interstage and fainng nose secnon. The dual 
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launch version can also 


be readily used for shared launches to minimize booster cost. 


8.2 Conclusions 

The basic conclusion of Dus s.udy CTable 8-2) is A* d* SA1C design is a viable, effecdve 
mea „s of fulfilling the NASA LifeSa, ^nitetnents. Given 

ZZZ r concerns — in a CONGS 

recovery operation. 

Table 8-2. Conclusions 



p.„ r>PFR ATION AL DESIGN MEETS PUBLIC SAFETY 
SSSf™ TOR WHITE SANDS OPERATIONS 

VEHICLE DESIGN CAN PROVIDE 

- Controllable. Uniform Environment 
_ Near-Free Space Radiation Spectrum 
— Exact 1 g Ground Control Experiment 

- Simple STS Mid-Deck Locker Use 

- Significant, Long Duration Power 

- Orbit Maneuver Capability 

. BOOST -USE OF PROVEN BOOSTER HARDWARE 

- Single Launch — Delta to All Ort> lts 

- Radiation Mission Compatible . I 

. Dual Launch — Delta/Atlas Pnmary Cost Saving 

- New, "Low Cost" Boosters Not Cost Effective 1 

. , ujohiv flexible scientific environment for the investigation of 

Thevehicledcs.gup^a . blytab ^ ^ ^ and technology 

radiation/gravity - J ^ J the opera d„ g peelers of any cenulfuge 

for such experimentation. 

new boosters. 
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8 . 3 Recommendations 

, • rrahle s-Yi is that key areas of the RRS SRD should be 
The primary recommendation Additional quantification of the 

further quantified to more definitive requirements can be a major design driver 

public safety issue is especially critical since .he safety mqu ^ addWon> the 

and lack of agreement on those requirements “1’™*“' of load environmental uniformity 

vehicle requirements should be refined to re ec e radia non experimentation. Any 

— 

need for a single mission mu relative importance of development vice 

requirements should be quantified. Last, ut no , to be pr0 perly 

hfe cycle (and/or 0&M) cost should be identified to permit the Phase C/D 

scoped. 

Table 8-3. Recommendations 


Iey requirements issues should be clearly 

SSsssbssbs*-- 

VEHICLE REQUIREMENTS SHOULD SPECIFY 

- payload Environment Uniformity 

* Degreed GrolmdControl Experiment Replication 

- Simple STS Mid-Deck Locker Use 

- Significant. Long Duration Power 

. Dual UuXSdEmpticOrbit Com^ubdi^ 

- Flexible Operations (Configuration/Missio ) 

- Reliability 

. MINIMIZE LIFE-CYCLE COST 


8.4 Summary 

In summary (Table 8-4), SAIC has determined that Qther recoverable 

viable, science friendly, operationally ^flexMe design approach allows a 

experimentation requirements, urt e • minimize overall program cost. 

rrrrrr:— — - 

development and operations efforts. 
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Table 8-4. Summary 


• KEY SAIC FEATURES 

- Science Friendly, Operationally Flexible 

- Dual Launch, Inter-Orbit Maneuvering 

• INTEGRATED MANAGEMENT APPROACH 

- SAIC — Payload, Overall System Integration 

- Fairchild — Vehicle Manufacture and Test 

- Subsystems — SAIC, Fairchild, and Others 

• CONCLUSIONS — ALL REQUIREMENTS CAN BE MET 

- Safe and Flexible Operations 

- Parallel Manufacturing and Dual Launch Save Cost 

. RECOMMENDATIONS -SPECIFY KEY REQUIREMENTS 

- Fail Operational Reentry for Public Safety 

- Science — Shielding Limits, Environment Uniformity 

. Operations — Flexibility, Power, Reliability 
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